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Date of transcription __11/09/2015 
On October 29, 2015, at approximately 2:15 PM] iS Department of State, met 
with Federal Bureau of Investigation (FBI) Special Agent (SA rovided 
saL____rith the following item: 


b6 per DOS 
b7C per DOS 


Attached to this communication as a 1A is the FD-597 Receipt for Property, signed rd 
listing the above item and a State Department Property Transaction form. 
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by Federal Bureau of Investigation (FBI) Special Agents 
in McLean, Virginia. 


(U/FOU6} The full FD-302a is housed in the saif__ fe of the captioned investigation due {3} 


to the classification level of the content discussed during the interview. b1 
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b3 per CIA 
bIE per FBI 
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by Federal Bureau of Investigation (FBI) Special Agents 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription _ 1/15/2016 


On 1/15/2016, SAL____ltocated 4 CDs associated with[_____—‘/PRESpRO 2 


Serial 29, located in 1A 21 Volumes 7, 8, 9, and 11. Said CDs were referenced in Serial 29 as follows: 7c 


bIE 
1 CD labeled Unclassified and titled_____‘FBI Request memo Oct 6, 2015. 


Clinton email 
Stephen D. Mull - 1 CD labeled Unclassified and titled “Files to Disk” 
. . . . » BG 
— 1 CD labeled Unclassified and titled {wr — Clinton Email PST bie 
Patrick F, Kennedy — 1 CD labeled Unclassified and titled “U/S P. Kennedy PST.” 


The aforementioned CDs were removed from their corresponding 1A envelopes by sald 


Jon 1/15/2016 and submitted to Evidence for further analytical processing/review. b6 
7c 
Investigation on __ 1/15/2016 at Washington, DC b3 


b6 


File # prusexo Date dictated N/A b7c 
b7E 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 
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Mull, Stephen D 


From: Mull, Stephen D 

Sent: Thursday, November 29, 2032 12:15 AM be 
b7C 

To: Greene, Douglas q | 

Subject: Fw: Sikorski in Brussels 

Fyi 


ceeee Original Message ----- 
From: Abedin, Huma 
To: Noyes, Julieta Valls; Sullivan, Jacob J; ‘huma@clintonemail.com' <huma@clintonemail.com>; Mull, |, Stephen D: 
Gordon, Philip H 

be 
Ce: Palmieri, Francisco iL sd bre 
Sent: Thu Nov 29 04:43:30 2012 
Subject: Re: Sikorski in Brussels 


We gave phil confirmation that bilat in brussels was still on. Doesn't affect tomorrow. 


— Original Message ----- 

From: Noyes, Julieta Valls 

Sent: Wednesday, November 28, 2012 05:39 PM bé 
To: Sullivan, Jacob J; 'Huma@clintonemail.com' <Huma@clintonemail.com>; Abedin, Huma bic 
Cc: Palmieri, Francisco L; 

Subject: Sikorski in Brussels 


Jake and Huma -- Apparently we have some real drama going on with the Poles feeling snubbed at “losing” their bilat in 
DC this week. The late addition of a pull-aside tomorrow has not apparently fixed the problem, and the Poles sti!l want a 
bilat on the margins of NATO. While we won’t be able to confirm a time in Brussels until we get there, can | confirm to 
Steve Mull that we will in fact given Sikorski a meeting there? Sorry to add to the spam on this question, Julieta 


Ps -- Again, happy birthday Jake! 


From: Mull, Stephen D 

Sent: Wednesday, November 28, 2012 5:10 PM 
To: Noyes, Julieta Valls; Greene, Douglas C 
Subject: RE: Today 


b6 
bic 


Thanks Julieta, but what started this whole drama waq____|message on Monday that the bilat the Secretary was 
supposed to have with Sikorski this Friday in Washington would no longer fit in the schedule and that we should instead 
offer a bilat in Brussels (attached). That prompted a wave of Sikorski angst aimed at least getting a brief Washington 
encounter to avoid the embarrassment of not getting even a brief encounter during the Washington stop (also 
attached}. If getting that pull aside means scrubbing the fuller bilat in Brussels, we'll be in even a worse position — is 
that what S staff is pushing? 

Many thanks for your patience on this! 
Steve 


From: Noyes, Julieta Valls 


HRC- 1343 


Sent: Wednesday, November 28, 2012 10:59 PM 
To: Mull, Stephen D; Greene, Douglas C 
Subject: RE: Today 


Steve -- To clarify, what is confirmed is a pullaside tomorrow in DC, not a bilat in Brussels. My message may have been 
unclear. Thanks, Julieta 


From: Mull, Stephen D 

Sent: Wednesday, November 28, 2012 4:53 PM 
To: Noyes, Julieta Valls; Greene, Douglas C 
Subject: RE: Today 


Thanks Julieta; EUR will be in touch for details. 


From: Noyes, Julieta Valls bs 
Sent: Wednesday, November 28, 2012 7:32 PM BIC 
To: Muli, Stephen D; Greene, Douglas C 

Subject: RE: Today 

Pef_——=sdvesy you can teil the Poles. Thanks. Julieta 

—— Original Message----- 

From: Mull, Stephen D 

Sent: Wednesday, November 28, 2012 1:41 AM bé 
To: Greene, Douglas C; Noyes, Julieta Vails bIC 


Subject: Re: Today 


Adding my former partner in crime Julieta Noyes, who's doing the trip and whon{__ asked to add Sikorski to schedule 
in Brussels. Julieta, anything new on you end? 

Thanks, 

Steve 


see Original Message ----- 

From: Greene, Douglas C 

To: Mull, Stephen D 

Sent: Wed Nov 28 06:56:43 2012 
Subject: Re: Today 


Thanks, Steve! 1'l! update you if | hear anything. In postponing the meeting, did we commit to a definite time and place 
for the future? It seems to me that commitment would be the best thing, short of a pull-aside. Doug 


----- Original Message ----- 

From: Mull, Stephen D 

To: Greene, Douglas C 

Sent: Wed Nov 28 06:52:29 2012 
Subject: Today 


Hi Doug, 
You'll see that this week's big crisis is sudden decision by S to put off mtg with Sikorski to next week in Brussels. Winid 
called it a “catastrophe” and Schnepf is beside himself. | told them both this is just moving venue and day by a few; they 


. HRC-1344 


feel embarrassed and are pressing for at least a pull-aside at tomorrow's award event. I'm disinclined to push for that 
since | think we have zero chance of getting both, but EUR was silent on it as of last night. If you hear anything on it fet 
me know; you'll see I've written already to them for an update. 
Otherwise | don't think you'll find any other messes to clean up. 


Welcome back! 
Steve 
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Mull, Stephen D 


From: Mull, Stephen D 

Sent: Thursday, November 29, 2012 12:17 AM 
To: Abedin, Huma 

Subject: Re: Sikorski in Brussels 


Thanks Huma! 


ceeee Original Message ----- 

From: Abedin, Huma 

To: Noyes, Julieta Valls; Sullivan, Jacob J; ‘huma@clintonemail.com' <huma@clintonemail.com>; Mull, Stephen D; 
Gordon, Philip H b6 
Cc: Palmieri, Francisco | bIc 
Sent: Thu Nov 29 04:43:30 2012 

Subject: Re: Sikorski in Brussels 


We gave phil confirmation that bilat in brussels was still on. Doesn't affect tomorrow. 


ooo Original Message ----- 

From: Noyes, Julieta Valls b6 
Sent: Wednesday, November 28, 2012 05:39 PM b7c 
To: Sullivan, Jacob J; 'Huma@clintonemail.com’ <Huma@clintonemail.com>; Abedin, Huma 

Cc: Palmieri, Francisco 

Subject: Sikorski in Brussels 


Jake and Huma -- Apparently we have some real drama going on with the Poles feeling snubbed at “losing” their bilat in 
DC this week. The late addition of a pull-aside tomorrow has not apparently fixed the problem, and the Poles stiff want a 
bilat on the margins of NATO. While we won’t be able to confirm a time in Brussels until we get there, can | confirm to 
Steve Mull that we will in fact given Sikorski a meeting there? Sorry to add to the spam on this question, Julieta 


PS -- Again, happy birthday Jake! 


From: Mull, Stephen D 
Sent: Wednesday, November 28, 2012 5:10 PM 


To: Noyes, Julieta Valls; Greene, Douglas C b6 
Subject: RE: Today pie 
Thanks julieta, but what started this whole drama wa: message on Monday that the bilat the Secretary was 


supposed to have with Sikorski this Friday in Washington would no longer fit in the schedule and that we should instead 
offer a bilat in Brussels (attached). That prompted a wave of Sikorski angst aimed at least getting a brief Washington 
encounter to avoid the embarrassment of not getting even a brief encounter during the Washington stop {also 
attached). if getting that pull aside means scrubbing the fuller bilat in Brussels, we'll be in even a worse position -- is 
that what S staff is pushing? 

Many thanks for your patience on this! 

Steve 


From: Noyes, Jutieta Valls 


HRC- 1346 


Sent: Wednesday, November 28, 2012 10:59 PM 
To: Mull, Stephen D; Greene, Douglas C 
Subject: RE: Today 


Steve -- To clarify, what is confirmed is a pullaside tomorrow in DC, not a bilat in Brussels. My message may have been 
unclear, Thanks, Julieta 


From: Mull, Stephen D 

Sent: Wednesday, November 28, 2012 4:53 PM 
To: Noyes, Julieta Valls; Greene, Douglas C 
Subject: RE: Today 


Thanks Julieta; EUR will be in touch for details. 


From: Noyes, Julieta Valls 

Sent: Wednesday, November 28, 2012 7:32 PM 

To: Mull, Stephen D; Greene, Douglas C be 
Subject: RE: Today bic 


oS ne you can tell the Poles. Thanks. Julieta 


From: Mull, Stephen D 

Sent: Wednesday, November 28, 2012 1:41 AM 
To: Greene, Douglas C; Noyes, Julieta Valls 
Subject: Re: Today 


be 
b7c 


Adding my former partner in crime Julieta Noyes, who's doing the trip and whom|__fsked to add Sikorski to schedule 
in Brussels. Julieta, anything new on you end? 

Thanks, 

Steve 


woes Original Message ----- 

From: Greene, Douglas C 

Ta: Mull, Stephen D 

Sent: Wed Nov 28 06:56:43 2012 
Subject: Re: Today 


Thanks, Steve! I'll update you if | hear anything. In postponing the meeting, did we commit to a definite time and place 
for the future? It seems to me that commitment would be the best thing, short of a pull-aside. Doug 


ceeee Original Message ----- 

From: Mull, Stephen D 

To: Greene, Douglas C 

Sent: Wed Nov 28 06:52:29 2012 
Subject: Today 


Hi Doug, 
You'll see that this week's big crisis is sudden decision by S to put off mtg with Sikorski to next week in Brussels. Winid 
called it a "catastrophe" and Schnepf is beside himself. | told them both this is just moving venue and day by a few; they 


2 
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* 


feel embarrassed and are pressing for at least a pull-aside at tomorrow's award event. !’m disinclined to push for that 
since | think we have zero chance of getting both, but EUR was silent on it as of last night. If you hear anything on it let 
me know; you'll see I've written already to them for an update. 


Otherwise | don't think you'll find any other messes to clean up. - 


Welcome back! 
Steve 
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Mull, Stephen D 


From: Mull, Stephen D 

Sent: Saturday, December 01, 2012 7:24 AM He 
NO: bIC 
Subject: RE: EUR TRIP UPDATES 

Classification: UNCLASSIFIED 

SMARTCategory: Working 


thankd | 


This email is UNCLASSIFIED. 


From[__ 


Sent; Saturday, December 01, 2012 1:34 AM 


To: Mull, Stephen D; Greene, Douglas C; Hartley, BrentR[ TT SCS—=~s@Yd b6 


Subject: Fw: EUR TRIP UPDATES b7c 


Fyi - see Poland ref. 


From: Noyes, Julieta Valls 

Sent: Friday, November 30, 2012 07:29 PM 

To: Noyes, Julieta Valls; Huma Abedin <Huma@clintonemail.com>; Abedin, Huma; Hanley, Monica R| fy 
Pod Mushingi, Tulinabo ST] 


Pennington, Joseph S; 


Cc: Palmieri, Francisco L bé 
Subject: EUR TRIP UPDATES S78 
Colleagues: 7 


Thanks to your hard work and efficiency, we will not require a trip call on Saturday, Sorry if that disappoints you! [had 
promised replies to our pending questions after today’s truncated trip call, so here they ai 


@ NATO Bilats: We are reaching ont to the Russians, Poles, and Turks with specific times for bilats in Brussels (or 
Dublin if necessary). Others TBD. 

@ Balkans Mccting on Margins of NATO: Still awaiting word on this. If/if it happens and the Secretary participates 
it would be only for a 15-minute drop- ‘by at the top, prior to her other events on Dec. § in Brussels. 

Energy Agreement Signing: This is cancelled. US-EU energy mecting is still on. 

Pull Aside with EU Parliament President: Approved on margins of EU reception in Brussels. 

CONCERN Award Presentation: Approved. Will happen on stage after the human rights speech in Dublin. 

with NI State Secretary Theresa Villiers; Approved, on margins of LAF lunch in Belfast. 

Photo Oy 1 Belfast: These (with peace makers and families of disappeared) will proceed as discussed, with 

possible addition of a few others. 


‘The latest schedule is attached, Absent any major changes, this will be the final pre-departure schedule. Further updates 
will come from the road. If you need assistance or additional information, please email me or feel free to contact me 
through the Ops Center. 


HRC-1349 


Again, sincere thanks from everyone on the Secretary's team for your hard work on this schedule, briefing materials, and 
advance preparations, It will be a great trip! 


Julieta Valls Noyes 
cutive Secretary 


US. artment of State 
b6 
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Re: Lapto 
From: Justin G. Coope b6 per DOS 


To: Hillary Clinton hri5@att. blackberry.net 
Subject: Re: Laptop 
Apple air. 


From: Hillary Clinton 

To: Justin Cooper 

ReplyTo: Hillary Clinton 
Subject: Laptop 

Sent: Nov 21, 2008 4:41 PM 


What is the simplest to use and lightest to carry laptop? 


HRC-1583 


Re: Lapto) 
To: - b6 per DOS 


Subject: Re: Laptop 


How much does one cost? 


HRC- 1584 


Re: 


To: Hillary Clinton hr15@att.blackberry.net 


Subject: Re: 


b6 per DOS 


b6 per DOS 


Yes,.,.but early since we leave for canada. Let me look at our schedules and figure out what 


time might make sense. Are you here all week? 


sores Original Message------ 
From: Hillary Clinton 

To: Justin G. Cooper 
ReplyTo: Hillary Clinton 
Subject: Re: 

Sent: Nov 22, 2008 4:39 PM 


Are you going to be out here this week? 
concen Original Message------ 

From: Justin G. Cooper 

To: Hillary Clinton 

ReplyTo: 

Sent: Nov 22, 2008 3:34 PM 

Subject: 


b6 Per DOS 


Just picked up your new laptop, backup drive, programs, and a protective sleeve. Got it for 


$1950 total. 


HRC-1585 


Lapto , 
To: Justin Cooper] uma Abedin b6 per DOS 
Huma_Abedin@ciinton-senate.gov 


Subject: Laptop 


1 need to get email set up on laptop so I can use. And I need to learn how to use it. Can 
you both help me get this done? Thx. ’ 


HRC-1586 
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HRC-1587 


rom: H <hdr22@clintonemail.com> 

ent: 3/29/2009 5:11:40 PM +00: 

os Justin Coopef b6 per DOS 
c: Huma Abedin 

ub} Do not call lists 


‘hen the State Dept installed our phones, they did not put our numbers--in NY and DC--on the do not cail lists so we've been getting 
alls about mattresses, life insurance, car financing, ete. Can you fix that for us? 


essage Headers: b6 per DOS 

To: "Justin Cooper) 

Ce: "Huma Abedin'"= Maryclinton.com> 

Subject: Do not call lists 

From: <hdr22@clintonemail.com> 

b6 per DOS 
RI \GER_TX_FLAG: true 
R_RIM_MSG_REF_ID: -§00360706 
R_RIM_MSG_FOLDER_ID: -3 
HRC- 1588 

R_RIM_DELETED_BY_DE true 
IGE: vib 


R RIM MSG ON DEVICE true 


ALL INFORMATION CONTAINED 
BEREIN IS UNCLASSIFIED 
DATE 11-28-2019 RY 276318T80 WSICG 


HRC-1589 


bé 


From: bic 
Sent: 3/17/2011 8:24:02 AM +00:00 

To: H <HDR22@clintonemail.com> 

Subject: Fw: Fwd: School b6 per DOS, FBI 


b7C per FBI 


i | bre 


Sent: Thursday, March 17, 2011 04: 
To: Huma Abedin; Justin Cooper; 


Subject: Fw: Fwd: School 


Thanks, b6 per DOS, FBI 

— anaes bé 

From pre 
: 7 : M 

To: Juma (Clinton) Abedin <adebinh@state.gov> 


Subject: Fw: Fwd: School 


HRC-1590 


_ Sent via BlackBerry by AT&T 


bé 
: Wed, Mar 2011 09:58:45 -0700 


b6 
From pyc 
Date: Wed, , 2011 at 9:17 AM 
Subject: Re: School 
Justin Cooper 
b6 per DOS, FBI 
b7C per FBI 
Dé 
bIC 


b6 per DOS, FBI 
a b7C per FBI 


HRC-1591 


b6 per DOS, FBI 
b7C per FBI 


Po 


Hope all is well, 


be 
[| pie 


PR_RIM_MSG_ON_DEVICE_3_6: true 
PR_RIM_DELETED_BY_DEVICE: true 
PR_RIM_MSG_REF_ID: 1149022532 
PR_RIM_PAGER_TX_FLAG: false 
PR_RIM_MSG_FOLDER_ID: og 
PR_RIM_MSG_STATUS: 1 


b6 per DOS 


HRC-1592 


“Q -S-Exchange-Organization-SCL: -1 
X-MS-TNEF-Correlator: 


b6 per DOS 
MIME-Version: 1.0 
L 5 b6 
U_<®w: Call fro: L ctx “wold ‘wolAny HZ Fw%3A Call from pyc 
To Temtoxot® £20bE 


iq Oh De mt tanesetcgzasetenneete +ee97l ETObE ilar AY 3 
Wut | <tx Lwore 4a; HA QA vA Ee "€$ ceed €€) HA, 4€,7 3€07 6€ E— 


vac coe ut Re: Callfron{____—'| * <% “wore “wolexs UZ Re%3A Call from a 


B.EMLeAtz2'+|eTObE '5)s n.blackbP T2L Oz Zev 83 8°S HV °..b X,N 


fzp 
evn of 

Sg=e2e b6 per DOS, FBI 
oie |Z b7C per FBI 


He wilt never go away. We have largely avoided an: 


be 
b7Cc 


but he's famous fo! 


tence Originat Message ----- 


bE 


Sent: Thursday, March 17, 2011 11:27 AM 


. b6 


Subject: RE: School 


HRC-1593 


b6 per DOS, FBI 
b7C per FBI 


From: Huma Abedin 


b6 
Sent: Thursday, March 17, 2011 5:34 AM b7c 
Subject: Re: School b6 per DOS, FBI 


b7C per FBI 


be 


Sent: Thursday, March 17, 2011 04:38 AM 


. . be 


Subject: Re: Schoot 


| 


b6 per DOS, FBI 
b7C per FBI 


HRC-1594 


bé6 per DOS, FBI 
BIC per FBI 


Whit ODaeyese 
air AOCey Ege Mid 721 5(?<4~ Al &quotsTimes New Roman&quot;">&nbsp; 


</span></span></span><span style="font-size:16.0pt; color:#141413">Oversight of financial markets 
and institutions to ensure transparency and honest dealing, competition, and consumer choice and to 
limit leverage to avoid future coilapses and baitouts.</span></p> 


<p class="x_MsoNormal” style="text-autospace:none"><span style="font-size:16.0pt; 
color:#141413">&nbsp;</span></p> 


<p class="x_MsotistParagraph" style="text-indent:-.25in; text-autospace:none"><span style="font- 
size:16.0pt; font-family:Symbol; color:#141413"><span style="">A-<span style="font:7.Opt &quot;Times 
New Roman&quot;">&nbsp; 


</span></span></span><span style="font-size:16 Opt; color:#141413">Protection and advancement of 
public interests the market cana€™t fix, including clean air, clean water, safe foad, safe transportation, 
safe workplaces, civil rights, access to affordable health 


care, and preservation of natural resources for the common good, including national parks, national! 
monuments, and national forests.</span></p> 


<p class="x_MsoNormai” style="text-autospace:none"><span style="font-size:16.0pt; 
color:#141413">&nbsp;</span></p> 


<p class="x_MsoListParagraph" style="text-indent:-.25in; text-autospace:none"><span style="font- 
size:16.0pt; font-family:Symbol; color:#141413"><span style="">A-<span style="font:7 Opt &quot;Times 
New Roman&quot;">&nbsp; 


HRC-1595 


ALL INFORMATION CONTAINED 
HEREIN IS UNCLASSIE 
DATE 11-28-2016 BY 


J6J18TRO NSICG 


HRC-1596 


BLL INFORMATION CONTAINED 
BEREIN 15 UNCLASSIFIED 


DATE 11-28-2016 BY 


212. 

Device Make/Model Earliest Date Latest Date 
Blackberry Curve 8310 Jan-09 May-09 
Blackberry Curve 8900 Jun-09 Sep-09 4 
Blackberry Curve 8900 Sep-09 Aug-11 
Blackberry Curve 8900 Aug-11 Feb-12 
Blackberry Curve 8900 Feb-12 
Blackberry Bold 9900 Feb-12 

Blackberry Curve 8900 Feb-12 Mar-12 
Blackberry Curve 9360 Feb-12 Mar-13 
Blackberry Curve 9360 Mar-13 Oct-13 
Blackberry Bold 9900 Nov-15, 


HRC-1597 


S76C18Te0 NSICG 


b6 
bIC 


ALL IWEORMATION CONTAINED 
HEREIN If MICLASSIFIED 
DATE 11-28-2016 BY J76318T80 NSICG 


HRC-1598 


soe Original Message b6 per DOS 
To: Justin Cooper 

Sent: Wed Apr 15 17:38:25 2009 

Subject: RE: Won't get to huma today 


Here foh is not working? That makes it easier actually. 

| can migrate her contacts, forward her new mail and then we Can just activate her without worrying 
about a transition day. 

-Bryan 

BTW - | have a bunch of sims here that I'll end up throwing away, you want me to mail them to you? 
Never hurts to have some on hand. 


sooo Original Message----- 
From: Justin Coope 
Sent. 
To: 


Sul 


b6 per DOS 


‘ont get to huma today 


They go away 
We don't have a sim yet 
Her foh isn't working so take ur time 


Poa Original Message ----- 


. b6 per DOS 


To: Justin Cooper 
Sent: Wed Apr 15 17:34:10 2009 
Subject: Won't get to huma today 


Tomorrow okay? 


en Cooper 
Subject: 


Hi Huma, 


Im activating a new # and sim card for you with ATT and activating HRC's sim card as well. 

Once your new # is set up you will need to send someone to an ATT store to pick up your new sim card 
and give them the imei # on your blackberry. 

In the meantime do you have the sim card for HRC that Justin gave you? Can you tell me the sim # on it? 


Thanks, b6 
: bIC 


L 
y@ 

ent-ip=64.18.0.180; helo-exprodSog105.obsmtp.com; 15 Apr 2009 21:34:12.0791 (UTC) 

FILETIME=[EB48D470:01C9BE11)"60 yyyyCh~Oh !tp §Fp'E *e*elant © 

Olmcetizemlixan =i 06 H@H +4 ut “+ -@e + «Al AS ET Dp Ox twa by 


HRC-1599 


ALL IMEORMATION CONTAINED 
HEREIN I5 UNCLASSIFIED 
DATE 11-28-2016 BY J76318T80 NSICG 


HRC-1600 


a 


Sent: 5/30/2008 2:03:34 AM +00;00 
To: "Abedin, Huma” <SBUSTATE/SES/RECIPIENTS/ABEDINH> 
Subject: 


Taking off soon. 
They cidnt get me a new berry here in time. Se | can give her my old one so she’s functional for ur trip. 


HRC-1601 


ALL INFORMATION CONTAIMED 
BEREIN IS UNCLASSIFIED 
DATE 11-28-2016 BY J76218T#0 WSICC 


HRC-1602 


Re: R.LP. Page | of 1 


Re: R.1.P. 


To: Hillary Clinton HDR22@clintonemail.com 
Subject: Re: R1.P 


Berry service was down earlier so that my have been the issue. 
Can still get you a new berry but probably not before you leave tomorrow. 
Do you want to try the newer kind with the pad (huma has ) instead of the bal! ? 


On switching the info -- your contacts and settings will all transfer as will a certain number of 
messages. 

All of your older messages will remain on the server. 

There is a way for me to move everything on to the new device but the security whizzes have 
convinced me that this is a horrible thing to do because you also transfer any viruses, spyware 
and junk overseas providers hide on there. 

We also have some new security features and polices that I would like to add to any new berry 
you have -- the most noticeable difference will require a more complex password. 

It is a constant fight to keep up with the security measures and unfortunately we keep seeing 
reminders of why we need to. ‘ 


On Jun 6, 2011, at 11:56 AM, H wrote: 


> I think my BB is finally in its last stage of life. I need a new one but don't want to lose any of 
my info. I leave tomorrow for Africa. Any chance I can get one by then? If not, don't worry. 


HRC-1603 
file:///F:/Ready%20to%20Send%20t0%20Drive/Cooper%20Laptop/Re_%20R.1.P._0017... 12/10/2015 


ALL INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED 
DATE 11-28-2016 BY 376318780 NSICC 


HRC- 1604 


ALL INSORMATION CONTAINED 


HEREIN IS UNCLASS) 
DATE 11-28-2014 BY 


=C 


iPad 
Picture Device Make/Model Earliest Date Latest Date 
iPad Generation 1 Jun-10 Jan-15 
iPad Generation 3 May-12 
iPad Mini Dec-14 


74218720 NSICG 


HRC-1605 


ALL INFORMATION CONTAINED 
BSEREIN IS UNCLASSIFIED 
DATE 11-28-2016 BY 3764187380 NSICG 


HRC- 1606 


From: dustin Coopef_ BG per Dos, FRI 


Sent: 43 IM +00:00 b7C per DOS, FBI 
To: <SBUSTATE/NCC AG/RECIPIENTY _____—it 

ce: . “Abedin,. Huma" <SBUSTATE/SES/RECIPIENTS/ABEDINH> 

Subject: Re: CC for hPad 


Zip is wrong. 10514 
Prob my typo 


To: Justin Cooper b7C per DOS 
Cc: Abedin, Huma <AbedinH@state.gov> 
Sent: Mon Jul 26 09:57:15 2010 
Subject: CC for hPad 
Something here is being rejected - do | have it wrong? 
in r 
b6 per DOS 
' b7C per DOS 


Justin i 
jappaqua NY 10154 


HRC- 1607 


ALL INFGRMATION CONTAINED 
BEREIN IS UNCLASSIFIED 
CATE 11-28-2016 BY 376218780 WSICC 


10 


HRC- 1608 


ALL IMEORMATION CONTAINED 
HEREIN IS UNCLASSIFIED 
DATE 11-28-2016 BY 376318780 NSICS 


I 


HRC-1610 


ALL INFORMATIOW CONTAINED 


HEREIN IS 


MHICLASSIFIED 


DATE 11-28-2016 BY J78318T8O MSICG 


212 
Picture Device Make/Model Earliest Date Latest Date 
Sony Xperia C6603 Apr-13 
Motorola EX431G Sep-13 Feb-14 


HRC-1611 


b6 
BIC 


ALL INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED 
DATE 11-28-2016 BY 3763187380 NSICG 


HRC-1612 


Date: Wed, Apr 9, 2014 at 7:16 PM bIC 
Subject: Re: it 
To! 


That's perfect 


bic 
Sure thing. Earlier in the day is better- can we shoot for around 10am? 


From{_____ mail! —szmail.com] b6 
Sent: Wednesday, April 09, 2014 6:38 PM bIC 
To 


Subject: Re: HRC emails 


Apologies - is there a good time for you to go through this on Friday? Thanks'[ | ‘ey 
c 

OnWed.Apr9,2014at 12:36PM. SSSCSCSCSCSCSCSCSCSC«Sdé mail, com> rote: b6 
H 200d to hear you're on the mend! [ will try you a little later this afternoon. Bes' BIC 
q[_| Sorry for the delay, | got extremely ill over the weekend and am just now feeling semi-human BIC 
again. 
Hf you have some time today, can you call me so t can give you the details on how to access HRC’s 
archived emails? 

bic 


Sent: Saturday, April 05, 2014 1:55 PM 
To: Monica Hanley 

Cey 

Subject: Re: HRC emails 


makes sense! would love the details - thanks! 


On Sat, Apr 5, 2014 at 11:54 AM, Monica Hanley | wrote: be 


hi! b7c 


I know I don't work with you anymore so no need to reply to me but if HRC wants access to her 
email, can she now access it through the webq___—its I think you should update Huma and| 


on where all of her old email is. 


HRC-1613 


Oni apes 201438 1AM 
Sorry, missed this the first time around. Yes, the emai has been imported into an archive mailbox on 


the server, and | can send the mac back to you soon 


Sent: Friday, April 04, 2014 10:10 AM 
To: Monica Hanley 

Cc 

Subject: Re: HRC emails 


Just checking back on wif fs it still with you? Thank vol | 


On Tue, Mar 25, 2014 at 4:42 pm _«igimail.com> wrote: 
Hi guys - just following up on this. Let me know when the wiped laptop ts ready to be 
shipped. best to send it to the foundation at: 


Hillary Rodham Clinton 

oft 

1271 Avenue of the Americas 
42nd Floor 

New York, NY 10020 


Let me know once it's gone out so we know to expect it. Thanks| | 


On Mon, Feb 10, 2014 at 9:03 PM, Monica Hanley[ i wrote: 


sounds great Hl 
if tomorrow falls through for you, we can find another time. Will email you'in the morning, 


On Mon, Feb 10, 2014 at 9:02 me ———CidYS wrote: 


Hi Monica- 
{ should be able to work with you on this tomorraw morning, can we shoot for around 11a EST? 


From: Monica Hanley [mailto] 

Sent: Monday, February 10, 2014 8:55 PM 
Te 

Ci 
Subje: 


: HRC emails 


Hi 
Tam no longer with HRC's office (Jan 31st was my last day) but [ wanted to try to finish the 
HRC email project which requires sending all of her archived email to your' server. You recall 


that we couldn't figure out a way for you to connect to the laptop that I havé in my possession. 


b6 
b7C 


b6 
b7C 


b6 
b7C 


b6 
b7C 


bb 
b7c 


HRC-1614 


Do you have time to try tomorrow? Last time, I tried from HRC’s home but tomorrow I can try 
from my home, which has good wifi. 


I'm sain’ Jor her situational awareness|___ fs soon we've transferred the email, I'll 


figure out 2 way to get the wiped laptop to you. 


best, 


This email’ has been scanned for email related threats and delivered safely by Mimecast, 
For more information please visit http://www.mimecast.com : 


This email has been scanned for: email related threats. and delivered safely by Mimecast. 
For more information please visit http:/Avww.mimecast.com 


This email has been scanned for email related threats “and delivered safely by Mimecast. 
For more information please visit http:/www.mimecast.com 


This emai! has been scanned for emait related threats and delivered safely by Mirhecast. 
For more information please visit http:/Awww.mimecast.com 


HRC-1615 


b6 
b7C 
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__dnformation related to this matter is'strictly prohibited. 


ALL INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED 
DATE 11-29-2016 BY J76d18TSO NSICG 


U.S. Department .of Justice 


“Federal Bureau of investigation 


601 4th Street, N.W. 
Washington, DC 20535 


CLASSIFIED INFORMATION NON-DISCLOSURE STATEMENT 


1 mM avel E. Radviqve>. , certify that on this date, 
nf Oils I was informed by Special Agent(s) of the Federal Bureau of 
Investigation (FB!) of a sensitive national security matter. | understand that disclosure of any classified 


T understand that the United States Government may seck any remedy available te it to enforce 
this agreement. : 


T understand that the unauthorized disclosure, unauthorized retention, or negligent handling of 
classified information related to this matter by me could cause damage or irreparable injury to the United 
States or could be used to advantage by a foreign nation. | further understand that | am obligated to 
comply with laws and regulations that prohibit the unauthorized disclosure of classified information. 


I understand that all classified information related to this matter is now and will remain the 
property of, or under the control of, the United States Government unless and until otherwise determined 
by.an authorized official or final ruling of-a court of law. 


These provisions are consistent with and do not supersede, conflict with, or otherwise alter 
employee obligations, rights or liabilities created by existing statute or Executive order relating to; 
(1) classified information; (2) communications te Congress; (3) the reporting to an Inspector General of a 
violation of any law, rule, or regulation or of mismanagement, gross waste of funds, abuse of authority, or 
of a substantial and specific danger to the public. health or safety; or (4) any other whistleblower 
protection. The definitions, requirements, obligations, rights, sanctions, and liabilities created by 
controling Executive orders and statutory provisions are incorporated into this agreement and are 
controlling. 


Unless and until I am released in writing by the FBI, I understand that ali conditions and 
obligations imposed upon me by this agreement apply during this interview and al ail limes thereafter, 


be 
b7C 
Date of Birth 
ov fos / zolle. 
Date 
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DATE 11-28-2014 BY J76318T80 NSICG 


U.S. Department of Justice 


“Federal Bureau of Investigation 


601 4th Street, N.W. 
Washington, DC 20535 


CLASSIFIED INFORMATION NON-DISCLOSURE STATEMENT 


: be 
» certify that on this date, bic 
, 1 was informed by Special Agent(s) of the Federal Bureau of 
Investigation (FBI) of a sensitive national security matter. | understand that disclosure of any classified 


__.. information related to this matter is’strictly prohibi 


I understand that the United States Government may seck any remedy available to it to enforce 
this agreement. : 


[ understand that the unauthorized disclosure, unauthorized retention, or negligent handling of 
classified information related to this matter by me could cause damage or irreparable injury to the United 
States or could be used to advantage by a foreign nation. | further understand that 1 am obligated to 
comply with laws and regulations that prohibit the unauthorized disclosure of classified information. 


[understand that all classified information related to this matter is now and will remain the 
property of, or under the control of, the United States Government unless and until otherwise determined 
by-an authorized official or final ruling of'a court of law. 


These provisions are consistent with and do not supersede, conflict with, or otherwise alter 
employee obligations, rights or liabilities created by existing statute or Executive order relating to: 
(1) classified information; (2) communications to Congress; (3) the reporting to an Inspector General of a 
violation of any law, rule, or regulation or of mismanagement, gross waste of funds, abuse of authority, or 
of a substantial and specific danger to the public.health or safety; or (4) any other whistleblower 
protection. The definitions, requirements, obligations, rights, sanctions, and liabilities created by 
controlling Executive orders and statutory provisions are incorporated into this agreement and are 
controlling. 


Unless and until fam released in writing by the FBI, I understand that all conditions and | 
osed upon me by this agreement apply during this interview and at all times thereafter. b 
b 
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U.S. Department of Justice 


“Federal Bureau of Investigation 


601 4th Street, N.W. 
Washington, DC 20535 


CLASSIFIED INFORMATION NON-DISCLOSURE STATEMENT 


Duvws , certify that on this dale, 

I was informed by Special Agent(s) of the Federal Bureau of 
InveStigatton (FBI) of a sensitive national security matter. | understand that disclosure of any classified 
ly. prohibited. 


| understand that the United States Government may seck any remedy available to it to enforce 
this agreement. : 


J understand that the unauthorized disclosure, unauthorized retention, or negligent handling of 
classified information related to this matter by me could cause damage or irreparable injury to the United 
States or could be used to advantage by a foreign nation. I further understand that | am obligated to 
comply with laws and regulations that prohibit the unauthorized disclosure of classified information. 


lunderstand that all classified information related to this matter is now and will remain the 
property of, or under the control of, the United States Government unless and until otherwise determined 
by.an authorized official or final ruling ofa court of law. 


These provisions are consistent with and do not supersede, conflict with, or otherwise alter 
employee obligations, rights or liabilities created by existing statute or Executive order relating to: 
(1) classified information; (2) communications to Congress; (3) the reporting to an Inspector General of a 
violation of any law, rule, or regulation or of mismanagement, gross waste of funds, abuse of authority, or 
of a substantial and specific danger to the public.health or safety; or (4) any other whistleblower 
protection. The definitions, requirements, obligations, rights, sanctions, and liabilities created by 
controlling Executive orders and statutory provisions are incorporated into this agreement and are 
controlling. 


Unless and until I am released in writing by the FBI, f understand that all conditions and | . 
obligations imposed upon me by this agreement apply during this interview and at all times thereafter. { 
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ALL INFORMATION COUTAINED 
IM IS UNCLASSIFIED 
DATE 11-23-2016 BY J76@918T20 HSICG 


HRC-1637 


From: huma abedin <huma@clintonemail.com> 


Sent: 9/1/2041 12:52:29 AM +00:00 

To: “Abedin, Huma’ <SBUSTATE/SES/RECIPIENTS/ABEDINH> 
Subject: Fwd: Calls 

srceren ene Forwarded message ---------- 

From: Hanley, Monica R <HanleyMR@state.gov> 


Date: Tue, Aug 30, 2011 at 3:56 PM 
Subject: Calls 
To: huma@clintonemail.com 


- she confirmed the 5:50pm time for potus call and his office will call 
- she has not acknowledged the kissinger request. He is available after 4pm. 


Message Headers: 


b6 per DOS 
bIE per DOS 


b6 per DOS 
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Fw: U.S. interests in Pak Paper 10-04 


ee 


Page | of 1 


From: “Abedin, Huma" <SBUSTATE/SES/RECIPIENTS/ABEDINH> 

Sent: 10/4/2009 11:06:39 PM +00:00 

To: b6 per DOS 
Subject: . Fw: U.S. interests in Pak Paper 10-04 

Attachments: U.S. interests in Pak Paper 10-04.doc 

From: b6 per DOS 


To: Abedin, Huma 

Ce: Sullivan, Jacob J 

Sent: Sun Oct 04 19:01:02 2009 

Subject: FW: U.S. interests in Pak Paper 10-04 


Huma 


Pis find attached the full, main Pakistan memo. Bes] | 


PR_RIM_PAGER_TX_FLAG: false 
PR_RIM_MSG_FOLDER_ID: 5 
PR_RIM_MSG_REF_ID: . 512685051 
PR_RIM_MSG_ON_DEVICE_3 6: true 
PR_RIM_MSG_STATUS: 1 
PR_RIM_DELETED_BY_DEVICE: true 


file:///E:/AF%20PAK%20Memo0%20Emails/AFPAK%20Memo%20updates/6/Fw %20U.... 


b7C per DOS 


b6 per DOS 
b7C per DOS 


HRC- 1640 
1/20/2016 


~— PENDING CLASSIFICATION REVIEW — 


@ DRAFT 10-04 
pee 


I. U.S. INTERESTS AND PAKISTAN 


b5 per DOS 


(® 


(@ 
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From: "Abedin, Huma" <SBUSTATE/SES/RECIPIENTS/ABEDINH> 
Sent: 8/16/2010 4:06:53 PM +00:00 
To: "Hanley, Monica R" <HanleyMR @state.gov> 


b6 per DOS 
Subject: Re: youl pect 


| went in and changed password 


From: Hanley, Monica R 

To: Abedin, Hufna 

Sent: Mon Aug 16 10:11:08 2010 

Subject: RE: yout pect b6 per DOS 


Yeah I wonder if someone hacked in. that stinks 


From: Abedin, Huma : 

Sent: Monday, August 16, 2010 10:10 AM 

To: Hanley, Monica R 

Subject: RE: your[ acct b6 per DOS 


Weird 

And my [__Jsnt working this morning 
From: Hanley, Monica R : - ~ 
Sent: Monday, August 16, 2010 10:04 AM 


To: Abedin, Huma b6 per DOS 
Subject: your, _jacct 


Geri just called - She got a spam email from your ct last night. b6 per DOS 
Pp 
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b6 per DOS 


ALL INFORMATION CONTAINED 
REREIN IS UNCLASSIFIED 
DATE 11-23-2016 BY 276318TS0 WSICG 


HRC- 1660 


From: "“Macmanus, Joseph E" <CLASSSTATE/CBPC ADMINISTRATIVE 
GROUP/RECIPIENTS/MACMANUSJE> 


Sent: 10/6/2009 6:07:49 PM +00:00 


To: "Mills, Cheryl D" <MillsCD@state.sgov.gov>; “Sullivan, Jacob J" 
<SullivanJJ@state.sgov.gov>; "Abedin, Huma" <AbedinH@state.sgov.gov> 


Subject: IT security in Moscow 


Our Mobile Communications Team sent in an email on electronic surveillance 
and monitoring in Russia, which I’ve excerpted below. The gist of it is: what’s 
yours is theirs. 


We will brief staff at the airport before departure, and post the necessary 
warnings in the hotel. 


From: Mobile Communications Team, Moscow Advance 
Sent: Tuesday, October 06, 2009 10:40 AM 
Subject: IT security in Moscow 


b7E per DOS 


Yesterday at the RSO’s security briefing, the RSO stated that the IT thre 1 


here in Moscow current! 


The following are recommendations regarding IT security in Moscow: 


HRC-1661 


Strong recommendation against any classified material or conversations in 
the hotel, including STE conversations and any printed materials, whether 
brought to the hotel by the party or delivered by courier. No matter how well 
The bIE per DOS 
Secretary's suite as well as the Senior Bureau, the Secretariat, and all 


bedrooms will] 


our 


rries: when you brin. 
b7E per DOS 


Strong recommendation against computers connected to the Internet in the 


Authorized the use of FOBs in the hotel ONLY for use with government- 
owned laptops under 100% continuous positive contro! by a cleared 


American, 


b7E per DOS 


BIE per DOS 


NOTE: a ldst or stolen FOB here in Moscow i 
must take great care not to loose their FOBs. 


HRC- 1662 


© DS Lead and DS Logistics indicated that they did not want computers and 
printers in their bedrooms per the IT requirements and would rather work in 
the Embassy. The laptops intended for them are being stored in the Embassy. 


Communications set-up in Moscow: 


Computers issued by MCT or supported by MCT (e.g., Abedin, Sullivan, 
Macmanus 


BIE per DOS 


the Marines and DS will restrict access. Anyone in 
a bedroom outside of f) must keep their laptops 


in their possessien at all times or store them at the Embassy (for example ina 


Computers we set up in S offices and bedrooms will be laptops owned by the 
Embassy and will remain in our custody while outside of the Embassy. The 
traveling party should be notified that we will have to use laptops instead of 
desktops at this stop. 


b7E per DOS 


RSO recommends courier of documents to the hote BIE per DOS 


; RSO permits use BlackBerries. AS SOON AS users return to Washington, their 
@ Besberywitneediobecieaned 
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bB7E per DOS ° 


Any government laptop used in the hotel and returned to Washington will 


The use of a personal computer is not recommended 
b7E per DOS 
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ALL INFORMATION CONTAINED 


BEREIN IS UNCLASSIF 


DATE 11-28-2014 BY 


IED 
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From: Justin Cooper b6 per DOS 


Sent: 10/12/2009 2:50:51 PM +00:00 

To: “Abedin, Huma” <SBUSTATE/SES/RECIPIENTS/ABEDINH> 
Subject: Re: Communication 

Awesome 


— Original Message ----- 

From: Abedin, Huma <AbedinH @state.gov> 
To: Justin Cooper 

Sent: Mon Oct 12 10:50:26 2009 

Subject: Re: Communication 


Its for security reasons 
| don’t want to use that one either 


— Original Message 

From: Jusin Capped) 6 per Dos 
To: Abedin, Huma 

Sent: Mon Oct 12 10:49:56 2009 

Subject: Re: Communication 


Are they taking them from u. Bc ur clintonemail.com shid work 


----~- Original Message ——- 

From: Abedin, Huma <AbedinH@state.gov> 

To: Doug Band; Hannah Richert; Oscar Flores; Jon Davidson; Justin Cooper 
Sent: Mon Oct 12 10:49:04 2009 

Subject: Fw: Communication 


Fyi for tues and wed. 
We won't have berries in russia 


--—- Original Message ----- 

From: Abedin, Huma 

To. Mills, Cheryl D; Valmoro, Lona J; Coleman, Claire L; Syed, Zia S; Beale, Courtney A Kramer; 
Macmanus, Joseph E; Dewan, Linda L; Crocker, Bathsheba N; Campbell, Piper; Wells, Alice G; Hanley, 
Monica R; Laszczych, Joanne; Toiv, Nora F; Smith, Daniel B; Jitoty, Lauren C; Muscatine, Lissa; 


nn Philip J; Steinberg, James B; Lew, Jacob J; | b6 per DOS 
ens, Lewis A; Hunter, Theresa M 


Sent: Mon Oct 12 10:46:44 2009 
Subject: Communication 


Want to make sure DC is aware that those of us in the Russia traveling party will be leaving blackberries 
on the airplane once we touch down in moscow tonite. Lew is getting us local cell phones and ops will 
have numbers. Hopefully few can also pass on numbers so you can reach us direct on tuesday and 
wednesday, We will be checking email periodically, but for the most part cell phones will be fastest way to 
reach us. 
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ALL INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED 
DATE 11-39-2016 BY I76318T30 WSICG 
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ALL ¥BI INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED 


DATE 04-04-2018 BY C&SW46B11 NSICG 


fom: Abedin, Huma . 

en Thursday, September 30, 2010 8:50 AM 
To: Jiloty, Lauren C; Coleman, Claire L; Sullivan, Jacob J 
Subject: Re: HbJ on moratorium 


Doesn't need to be. 
They can talk in code. 


aoe Original Message ----- 

From: Jiloty, Lauren C 

To: Abedin, Huma; Coleman, Claire 1; Sullivan, Jacob J 
Sent: Thu Sep 30 08:47:29 2010 

Subject: RE: Hb) on moratorium 


HRC asked for secure, but up to you all 


From: Abedin, Huma 

Sent: Thursday, September 30, 2010 8:44 AM 

To: Jiloty, Lauren C; Coleman, Claire 1; Sultivan, Jacob J 
Subject: Re: HbJ on moratorium 


@: this call have to be secure? 

an we call now thru ops non-secure. Jake are u around? 
Original Message 
From: Jiloty, Lauren C 
To: 'H' <HDR22@clintonemait.com> 
Cc: Abedin, Huma 


Sent: Thu Sep 30 08:14:41 2010 
Subject: RE: Hb) on moratorium 


Jake can do 1:15 PM today - 2:15 PM today. He'll call the yellow phone when we tell him you are ready. Claire is 
working it into your schedule. 


on Original Message----- 

From: H {mailto:HDR22@clintonemail.com] 
Sent: Thursday, September 30, 2010 8:22 AM 
To: Jiloty, Lauren 

Subject: Re: Hb) on moratorium 


b6 per DOS 


Thx. Pls schedule,a secure call w Jake for me. 
nooo Original Message ----- 
@: Jiloty, Lauren C <JilotyLC@state.gov> 
H 
ent: Thu Sep 30 07:51:22 2010 
Subject: RE: Hb) on moratorium 


HRC- 1668 


Received all 8 


@o: Message----- 
tom: H [mailto:HDR22@clintonemail.com} 


Sent: Thursda 010 7:54 AM. 
To: Jiloty, Lauren C b6 per DOS 


Subject: Fw: HbJ on moratorium 
Pls print. 


Sa Original Message ----- 

From: Sullivan, Jacob J <SullivanJJ@state.gov> 
To: H . 

Sent: Mon Sep 20 12:17:51 2010 

Subject: Fw: HbJ on moratorium 


Fyi 


oes Original Message aoe 

From: Feltman, Jeffrey D 

To: Sullivan, Jacob J; Hale, David M; Rudman, Mara; Walles, Jacob: b6 per DOS 
Sachar, Alon (NEA/IPA); Djerassi, Alexander M; Sanderson, Janet A; Schlicher, Ronald 

L 

Sent: Mon Sep 20 12:15:42 2010 


eo" HbJ on moratorium bl per DOS 


| saw Qatari PM Hamad bin Jassim. 


Jeffrey Feltman 


HRC-1669 


ALL INFORMATICN OCHTAIMED 
BEREIN IS UNCLASSIFIED 
CATE 11-28-2016 BY J76218T80 NSICG 
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HRC-1670 


. From: - “Abedin, Huma" <SBUSTATE/SES/RECIPIENTS/ABEDINH>- 
Sent: 8/30/2014 9:17:12 PM +00:00 


To: ~ “Mull, “Stephen bo" <MullsD@state. gov>; "Mills, Cheryl D” 
<MillsCD @state. gov> 


cc: "Kennedy, Patrick F" <KennedyPF @state.gov>; “Hanley, Monica R" 
<HanleyMR@state.gov> 


Subject: Re: S Communications 


Steve ~het's discuss the state blackberry, doesn't make a whole lot of sense. 

As for the equipment, the commo team was limited in some capacity because'we did not have 
authorization from owners of residence-to instal! equipment. We did it regardless. Additionally, as $ 
knows, |the team didn’t have access to the property until a couple of hours before $ arrived. 

Finally,.as even the white-house attested, this was a pretty wide spread problem, not just affecting us. 
So we should bear that in mind. 


From: Mull, Stephen D 

Sent: Tuesday, August.30, 2011 On: 39 PM 

To: Mills, Cheryl D 

Ce: Abedin, Huma; Kennedy, Patrick F; Hanley, Monica R 
Subject: S Commiunications 


Cheryl, 


Thanks again for alerting me to othe communications issues the Secretary has been having. Here’s a status report: 
b7E per BOS 


On the immediate probiem of the Secretary's riot being able to have her calls transferred TT 


« On the more long term issue, I’ve asked our team to develop an enhanced package of capabilities and 
equipment that we would propose deploying with the Secretary to be as closely co-located as possible with her 
when she i is on travel away from herusual residences. The package will include things that anticipate the 
normally, unexpected.such as hurricanes, power outages, earthquakes, locusts; etc, such as generators, 
uninterrupted power supplies, supplementary satellite capabilities, including satellite phones for when focal 
infrastructure fails (a5 it did in NY over the weekend), 


HRC-1671 


Separately, we are working to provide the Secretary per her request a Department issued Blackberry to replace 
her personal unit which is malfunctioning (possibly because of her personal email server is down). We will 
Prepare two versions for her to use - one with an operating State Department email account (which would mask 
her identity, but which would also be subject to FOIA requests}, and another which would just have phone and 
internet capability. We're working with Monica to hammer out the details of what will best meet the Secretary's 
needs. 


Please let me know if you need anything more for now, and I'll be in touch with the above longer term options 
soon. 


Thanks, 
Steve 
: b6 per DOS 
PR_RIM_PAGER_TX_FLAG: true b7E per BOS 
PR_RIM_MSG_FOLDER_ID: 6 
PR_RIM_MSG_REF_ID: 1373676228 
PR_RIM_MSG_ON_DEVICE_3_6: true 
PR_RIM_MSG_STATUS: 1 


HRC-1672 


ALL INFORMATICN CONTAINED 
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RELEASE IN PART _ 
B41 ,1.4(G),1.4(E), B7(C),B6,1.4(C) : 7 


.™ ease of Blackberries i the Baogany Ro 
\ the convenience their use can dil to staff that have a 


Kl 
promote crucial security practi and enforce i important security standards among 
“State Department staff. ep : 

As arralternative, we ‘est that DS work with S/ES-IRM to make. aceess 
to the Secretary’s OpenNet ¢ ton her desktop workstation as easy and 
convenient as possible. For le, we-are happy to work with IRM to lerigthen 
or even eliminate the: time-out fiinction to allow the Secretaty’s Special: Assistant 

to log-on to review her emails arid schedules. 


Cs - 


nd using! eae De inside the : Mahogany | Row. . 


BALL FBI INFORMATION CONTAINED 
BEREIN 15 UNCLASSIFIED 
DATE 04-04-2019 BY CéewesB11 NSICG 
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mo 


CO SRBLASBEIED U.S. Department of State Case No. F-2015-05028 Doc No. C05891070 Date: 11/12/2015 , _ 


Tab 4 — Washington. Post 
Enemy” 


“pl per DOS. 
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514 4(G) 
-Bt 
bl per Dos 
Reports on Blackberry Vulnerabilities: 4 4 MC). 
ama’s Phone Security and Yours” = ee 
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ALL INFORMATION CONTAINED 
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HRC-1679 


From: Huma Abedin 


Sent: 6/17/2011 7:17:55 PM +00:00 

To: Oscar Foef 6 per DOS 
ce: H <HDR22@clintonemail.com> 

Subject: Oscar - pouch coming closer to 5pm fyi 

PRAM PAGERIXFLAG we 
PR_RIM_MSG_REF_ID: 31482329 

PR_RIM_MSG_FOLDER_ID: 5 

PR_RIM_DELETED_BY_DEVICE: true 

PR_RIM_MSG_ON_DEVICE_3_6: true 

PR_RIM_MSG_STATUS: 1 

PR_RIM_INTERNET_MESSAGE_ID: | 


bé6 per DOS 
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ALL INFORMATION CONTAINED 


DATE 11-29-2016 BY 


REIN IS UNCLASSIFIED 


ITBILETSO NSICS 


HRC-1681 


‘om: Abedin, Huma <AbedinH@state.gov> 


Sent: Saturday, October 17, 2009 12:38 PM 
To: H 
Subject: Secure fax 


There are 2 draft letters from mara being faxed to secure fax right now. Oscar will receive. 
Also, norwegian fm stoere wants to talk tomorrow. He will be in aghanistan. 


‘ HRC-1682 


ALL IMPORMATION CONTAINED 
HEREIN IS UNCLASSIFIED 


DATZ 


11-23-2016 BY 


376318780 NSICG 


HRC- 1683 


2. 


@ 


jom: Hanley, Monica R <HanleyMR@state.gov> 
ent: Monday, August 22, 2011 10:59 AM 

To: H 

Ce: Huma Abedin 

Subject: Jalil FINAL call sheet 


Jake has made some changes and here is the final call sheet. Marina will bring you the copy that we faxed over. 


The Secretary’s Call Sheet for 


Transitional National Council Chairman Abdel Jalil 


Purpose of call: To express American support and solidarity with Jalil and the TNC on the historic events unfolding in 
Libya and to encourage him to use his leadership to support a peaceful, transparent, and inclusive transition to 


democracy. b5 per DOS 


HRC- 1684 


bS per DOS 


Background: TNC Chairman Abdel Jalil is the widely respected and mild-mannered leader of the Transitional National 
Council, considered the “anti-Qadhafi.” He announced the arrest of Qadhafi’s son, Saif al-Islami, by rebel forces August 
21 and is reportedly preparing now for an address to the Libyan people on the end of Qadhafi’s reign. While the TNC 
has said they are committed to avoiding bloodshed and retributive violence, it is important now that Abdel Jalil make a 
national appeal to Libyans to do so. You sent him a letter encouraging the consolidation of control over the militias and 
a credible investigation of General Younis’ killing, which was hand-delivered by A/S Feltman August 20. 


HRC-1685 
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B 


From: “Abedin, Huma” <SBUSTATE/SES/RECIPIENTS/ABEDINH> 
Sent: 7/2/2009 3:55:51 PM +00:00 


Pdb will come to secure fax 10am fri and sat 


PR_RIM_PAGER_TX_FLAG: false 


PR_RIM_MSG_FOLDER_ID: -5 


PR_RIM_MSG_REF_iD: 1746680797 
PR_RIM_MSG_ON_DEVICE true 

_3_6: 

PR_RIM_MSG_STATUS: 4 
PR_RIM_DELETED_BY_DE true 

VICE: 


HRC-1687 


ALL INFORMATION CONTAINED 


BEREIN IS UNCLASS: 
DATE 11-22-2016 BY 


ED 
378I187380 NSICG 


HRC- 1688 


ny 


Yes - ops' will connect yang call to residence at 10am 
Will let u know about spain. 


From: H <hdr22@clintonemail.com> 
To: Huma Abedin 

Sent: Sat Mar 2] 07:49:26 2009 
Subject: Re: Tomorrow 


Can we do Yang call at 107 If not, can we do tomorrow morning? 


You can also add Spanish FM except btw 11-1 and after 7. 


From: Huma Abedin 

Date: Fri, 20 Mar 2009 21:30:25 -0400 
To: <hdr22@clintonemail.com> 
Subject: Tomorrow 


Just to confirm for tomorrow: 


- press clips and overnight brief will come in the morning. Oscar will print for you 


+ pdb will arrive at 10am on the secure fax. U will have to pick up phone and go secure. Because of the nature of 


what is coming, oscar is not able to do do this. 


- yang call can happen at 10am. Can we confirm that? U have a call sheet (has a secret cover). 


+ what should we do with spanish fim? We can hold till monday. 


HRC- 1689 


ALL INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED 
DATE 11-29-2016 BY J76218T80 WSICC 


HRC- 1690 


From: “Abedin, Huma" <SBUSTATE/SES/RECIPIENTS/ABEDINH> 


Sent: 6/23/2011 12:04: Mele) 
To: ‘humamabedi b6 per BOS 


Subject: Marina print 
Attachments: Libya TP v6.docx; 062311 Libya QAs for Use with Congress 62311 
bne. docx 


----- Original Message ---— 

From: Mills, Cheryl D 

Sent: Thursday, June 23, 2011 08:01 AM 

To: Abedin, Huma 

Ce: 'H' <HDR22@clintonemail.com> 

Subject: FW: Libya Prep Documents - Top Line and Q/A for 8:30am Cail with S 


Huma 

For printing for HRC for cail in 30 minutes. 

Thanks. 

cdm 

-----Original Message----- 

From: Mills, Cheryl D 

Sent: Thursday, June 23, 2011 7:59 AM 

To: Adams, David S; Koh, Harold Hongju; Hammer, Michael A; Reines, Philippe i; Nuland, Victoria J; 
Nides, Thomas R; McDonough, Denis R. 

Ce: Sullivan, Jacob J; Burns, William J; Steinberg, James B; Mills, Cheryl D; Crocker, Bathsheba N; 
Wells, Alice G; Abedin, Huma; Valmoro, Lona J 

Subject: Libya Prep Documents - Top Line and Q/A for 8:30am Call with S 

Please review attached for call and per note below, will incorporate any fixes after 8:30am call with S. 
Please call into Ops at 8:25am. 

Thanks. 

cdm 

-----Original Message----- 

From: Crocker, Bathsheba N 

Sent: Thursday, June 23, 2011 7:55 AM 

To: Mills, Cheryl D; Sullivan, Jacob J; Burns, William J; Steinberg, James B 

Subject: Libya -- both docs -- latest 

All: 

Attached is very latest of S statement and QA, attempting to incorporate all additional edits. 


We'll make any additional needed fixes after 830 call. 


HRC-1691 


Sheba 


b6 per DOS 


PR_RIM_MESSAGE_SUBMI 
SSION_ID: 


PR_RIM_PAGER_TX_FLAG: true 


AGE_ID: State.sbu> 


PR_RIM_MSG_FOLDER_ID: -5 


PR_RIM_MSG_REF_ID: 231356429 
PR_RIM_MSG_ON_DEVICE true 
3_6: 


PR_RIM_MSG_STATUS: 1 


HRC-1692 


ALL INEORMATION CONTATNED 
HEREIN IS UNCLAS 
DATE 11-23-2014 BY J7€318780 NS 


HRC-1693 


From: “Hanley, Monica R" <SBUSTATE/SES/RECIPIENTS/HANLEYMR> 


Sent: 8/30/2011 10:09:28 PM +00:00 
To: "Abedin, Huma" <AbedinH@state.gov> 
Subject: Re: S berry 


Do you want a different address? 


~~~ Original Message ----- 

From: Abedin, Huma 

Sent: Tuesday, August 30, 2011 05:19 PM 
To: Hanley, Monica R 

Subject: Re: S berry 


That can't be it. 


---~ Original Message ----- 

From: Hanley, Monica R 

Sent: Tuesday, August 30, 2011 04:19 PM 
To: Abedin, Huma 

Subject: Fw: S berry 


SSHRC @state.gov 


----- Original Message ----- 

From: Bentel, John A 

Sent: Tuesday, August 30, 2011 04:15 PM 
To: Hanley, Monica R 

Subject: RE: S berry 


Monica: ' We actually have an account previously set up: SSHRC@state.gov. There are some old 
emails but none since Jan '11 -- we could get rid of them. 

You should be aware that any email would go through the Department's infrastructure and subject to 
FOIA searches. 


Let me know if any questions and what you would like us to do. 


Thanks! 
John 


SBU 
This email is UNCLASSIFIED 


~---Original Message—--- 

From: Hanley, Monica R 

Sent: Tuesday, August 30, 2011 3:59 PM 
To: Bentel, John A 

Subject: S berry 


Do you know what her email address would be on a state dept berry? 


HRC-1694 


ALL INZORMATION CONTAINED 
REIN IS UNCLASSIFIED 
DATE 11-23-2014 BY J76318T#0 NSICG 


HRC-1695 


@.: Abedin, Huma 
ent: Thursday, December 16, 2010 6:45 PM 


To: . Sullivan, Jacob } 
Ce: Hanley, Monica R 
Subject: RE: mail from clintonemail 


Ok | will call her in the am 
And give her all details 


From: Sullivan, Jacob J 

Sent: Thursday, December 16, 2010 6:45 PM 
To: Abedin, Huma 

Cc: Hanley, Monica R 

Subject: RE: mail from clintonemail 


We met today. What she needs is an email that is not going through so that she can check where it gets blocked. She 
also wants the name of the clintonemail administrator. 


From: Abedin, Huma 

Sent: Thursday, December 16, 2010.6:41 PM 
To: Sullivan, Jacob J 

Cc: Hanley, Monica R 

ject: RE: mail from clintonemail 


Cindy said the exact same thing to me 2 weeks go 

But this is a real problem 

itis happening a lot even though we have changed 

1 will call cindy and resolve with her tomorrow morning 


From: Sullivan, Jacob 3 

Sent: Thursday, December 16, 2010 6:38 PM 
To: Abedin,. Huma 

Cc: Hanley, Monica R 

Subject: FW: mail from clintonemail 


Not sure how to handle this cuz it’s really HRC emails. 


From: Almodovar, Cindy T 

Sent: Thursday, December 16, 2010 3:23 PM 
To: Sullivan, Jacob J 

Subject: mail from clintonemail 


Hi, Jake. 


IRM has been doing a lot of investigative work on messages from clintonemail.com addresses and | can look 
6 anything delivered say in the past month. 


HRC-1696 


“tan you send me any information about a message you might not have received? You mentioned that you 


don’t get messages from Huma. 


@... could send me just the subject line or approximate date/time of a message, | can work with that. 


Thanks, Cindy. 


0 Cindy Trodden Almodovar 
S/ES Supervisory Systems Administrator 
$/€S-IRM POEMS Help Desk 

U.S, Department of State 

Phone: 202-647-8328 | Fax: 202-647-8191 


HRC-1697 


ALL INFORMATICN CCNTAINED 
BEREIN 15 UNCLASSIFIED 


DATE 11- 


“2016 BY 


e76g1e8Ts0 NSICG 


(8. 


HRC- 1698 


ALL 


DATE 


INFORMATION CONTAINED 
IN IS UNCLASSIFIED 
11-29-2016 BY J76d18TsO NSICG 


HRC-1700 


From: Justin G Cope b6 per DOS 
Sent: , 10/30/2014 4:00: z 

To: ‘“Abedin, Huma” <SBUSTATE/SES/RECIPIENTS/ABEDINH> 

Subject: Re: 


hope sometime tomorrow. Out of my control. But if it looks to be long term | will have to route it through 
another server. . . 

—— Original Message------ 

bé per DOS 
Subject. Re 

Sent: Oct 29, 2011 11:58 PM 


| noticed it a while ago, was just about to text you. 
Let me know when u think it will be back up. 


— Original Message . 
From: Justin G Cooper a b6 per DOS 
Sent: Saturday, October 29, 2: 7 . 1 


To: Abedin, Huma 


Fyi clintonemail.com is down due to an outage with our ISP. 
Our actual systems are up. 

If it looks to be long term ie past tomorrow | will réroute the mail. 
U or oscar can tell hre 


bé per DOS 
Message Headers: b7E per DOS 


. HRC-1701 


ALL INFORMATICN CCNTAINED 
BEREIN 15 UNCLASSIFIED 


DATE 11-23-2016 BY 


o76g18Ts0 NSICG 


HRC-1702 


20 


From: “Abedin, Huma" <SBUSTATE/SES/RECIPIENTS/ABEDINH> 

Sent: 4/9/2011 7:05:02 PM a 

To: b6é per DOS 
Subject: : 


omg. 


--— Original Message --——- 

From: Justin Cooper! B6 per Dos 
To: Abedin, Huma 

Sent: Sun Jan 09 02:57:16 2011 


Subject: 
(had to shut down the server 


Someone was trying to hack us and while they did not get in i didnt want to let them have the chance to. 
| will restart it in the morning, 


PR_RIM_PAGER_TX_FLAG: false 


PR_RIM_MSG_FOLDER_ID: -5 


PR_RIM.MSG_REF_ID: 934001673 
PR_RIM_MSG_ON_DEVICE true 
36: 


PR_RIM_MSG_STATUS: 1 
PR_RIM_DELETED_BY_DE true 
VICE: 


HRC-1703 


ALL INFORMATION CONTAINED 
i IN IS UNCLASSIFIED 
DATE 11-29-2016 BY J76d1e8TSO NSICG 


Q\ 


HRC-1704 


From: 
Sent: 
To: 


Subject: 


"Abedin, Huma" <SBUSTATE/SES/RECIPIENTS/ABEDINH> 
1/10/2011 6:30:30 AM +00:00 

"Sullivan, Jacob J" <SullivanJJ@state.gov>; "Mills, Cheryl D" 
<MillsCD@state.gov> . 


Don't email hrc anything sensitive. | can expiain more in person. 


PR_RIM_PAGER_TX_FLAG: 


PR_RIM_MSG_FOLDER_ID: 


PR_RIM_MSG_REF_|D: 
PR_RIM_MSG_ON_DEVICE 
3 6: 
PR_RIM_MSG_STATUS: 
PR_RIM_DELETED_BY_DE 
VICE: 


2108801984 
true 


4 
true 


HRC-1705 


ALL INFORMATION CONTAINED 
BEREIN IS UNCLASSIFIED 
DATE 11-29-2016 BY J76218T80 WSICC 


HRC-1706 


ALL INFORMATION CONTAINED 
BEREIN IS UNCLASSIFIED 
DATE 11-38-2016 BY J76218T80 WSICC 


HRC-1713 


From: Huma Abedin 


Sent: 4/2/2012 10:50:02 PM +00:00 
To: H <HDR22@clintonemail.com> 
Subject: May - Asia 


impossible. you will get a hard copy tomorrow but i am not sending through the system or it will go all 


over the building. it has the schedule options that geoff pyatt and i suggest at the end. 


bS per DOS 


HRC-1714 


b5 per DOS 


Attachment: 
Potential Itineraries 
© POTENTIAL ITINERARIES 


bS per DOS 


HRC-1716 


b5 per DOS 


Option 2: 


b5 per DOS 


b5 per DOS 


HRC-1717 


: ALL INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED 
DATE 11-23-2016 BY J76218T#0 WSICC 


HRC-1718 


aig b5 per DOS 
: ots not 
___WMpOssible. you will get a hard copy tomorrow but | am not sending through the system or itiwill go all 


over the building. it has the schedule options that geoff. pyatt’and i suggest at the end. 


BS per DOS” 


HRC-1719 


@ 5 per DOS 


Attachment: 


Potential Itineraries 
POTENTIAL ITINERARIES 
i b5 per DOS 
Option 2: 
bS per DOS 


HRC-1721 


e@ b5 per DOS 


Option 3: : b5 per DOS 


PR_RIM_PAGER_TX_FLAG: true 
PR_RIM_MSG_REF_ID: : -838589299 


HRC-1722 


PR_RIM_MSG_FOLDER_ID: 


PR_RIM_DELETED_BY_DEVICE: 


PR_RIM_MSG_ON_DEVICE_3_6: 


PR_RIM_MSG_STATUS: 


PR_RIM_INTERNET_MESSAGE_ID: 


true 


true 


b6 per DOS 


| 


HRC-1723 


ALL INFORMATION CONTAINED 
HEREIN IS WICLASSIFIED 
DATE 11-29-2016 BY J76d1gT#0 NSICG 


HRC-1724 


UNCLASSIFIED U.S. Department of State Case No. F-2014-20439 Doc No. C05777132 Date: 09/30/2015 


RELEASE IN PART 
1.4(8 MD) 


From: Feltman, Jeffrey D <Feltman/0@state.gov> 
Sent: Saturday, January 8, 2011 11:16 AM 
To: H; Huma Abedin 
Subject: . Re: AG points from Jeff B1 
1.4(D) 
~ The references I've seen are PJ's comments from before the meeting (before the King's request), 
The only “post meeting” briefs I've seen relate to someone on Saad's team talking about the Hariri 
meeting. Have you seen 
somethin| - 
Jeffrey Feltman . 
~-- Original Message —— 
From: H <HDR22@clintonemail.com> 
To: Huma Abedin <Huma@clintonemail.com>; Feltman, Jeffrey D pt 
Sent: Sat Jan 08 11:05:18 2011 1.4(D) - 
Subject: Re: AG points from Jeff BS 
I think | could 
Also, In the articles about my mtg w the King, they reported | had discussed Lebanon! 
-— Original Message —--- 
From: Huma Abedin . 
B1 

To: H 1 1.4(B) 
Sent: Sat Jan 08 11:00:05 2011 1.4(D) 
Subject: AG points from Jeff BS 
Jeffrey Feltman 
Classified by DAS, A/GIS_DeS-on-09/30/2015 ~ Class: CONFIDENTIAL ~ Reason: +-4{B}, 1.4(D] ~ Declassify on’ 
01/07/2036. ° : 

HRC-1725 


UNCLASSIFIED U.S. Department of State Case No. F-2014-20439 Doc No. C05777132 Date: 09/30/2015 


“TBEERET™ ALL FBI INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED 


DATE 04-04-2019 BY Céew4éB11 NSICC 


ol Feltman, Jeffrey D <FeltmanJD@state.gov> 
Sent: Saturday, January 8, 2011 11:16 AM 
To: H; Huma Abedin 
Subject: Re: AG points from Jeff 
bl per Dos 
The references I've seen are PJ's comments from before the meeting (before the King's request] hat 
e only “post meetine" briefs I've seen relate on Saad's team talking about the Hariri 3 


Have you seen 3! 
something else? 
Jeffrey Feltman 


— Original Message ----- 

From: H <HDR22@clintonemail.com> 

To: Huma Abedin <Huma@clintonemail.com>; Feltman, Jeffrey D 
Sent: Sat Jan 08 11:05:18 2011 


Subject: Re: AG points from Jeff bl per DOS 


18) b5 per DOS 
I think | could 


Also, in the articles about my mtg w the King, they reported | had discussed a | 3 


sense Original Message ----- 


@: Huma Abedin 
cH 
ent: Sat Jan 08 11:00:05 2011 


bl per DOS 
Subject: AG points from Jeff bS per DOS 
3 
Jeffrey Feltman 
' HRC-1726 


ALL INFORMATION CONTAINED 
BEREIN 15 UNCLASSIFIED 
DATE 11-23-2016 BY J76c18T80 NSICG 


HRC-1727 


Fe Abedin, Huma <AbedinH@state.gov> 


rom: 
Sent: Sunday, April 10, 2011 10:14 AM 
To: H 

Subject: Fw: Stevens Update (important) 
Importance: High 


Jake may have sent but in case not.. 


Original Message -- 
From: Davis, Timmy T 
Sent: Sunday, April 10, 2011 06:48 AM 

To: Sullivan, Jacob J; Abedin, Huma; Wells, Alice G; S_SpecialAssistants 
Subject: Stevens Update (important) 


(SBU) Per Speciai Envoy Stevens: 


The situatlon In Ajdabiyah has worsened to the point where Stevens is considering departure from Benghazi, The 
envoy’s delegatlon is currently doing a phased checkout (paying the hotel bills, moving some comms to the boat, 
etc). He will monitor the situation to see if it deteriorates further, but no decision has been made on departure, He will 
wait 2-3 more hours, then revisit the decision on departure. 


He received reports of shelling last night in Ajdabiyah as well as snipers shooting people in the city. AFRICOM 
reported Qadhafi’s forces took the eastern and western gates of Ajdabiyah, with 5 vehicles at the eastern gate and 50 at 
the western gate. More Qadhafi forces are heading to Ajdablyah from Brega. 


The Brits report Qadhafi forces are moving from Sirte to Srega, which they interpret as preparation for another 
assault on Ajdabiyah today. 


He plans to discuss the situation further with the Brits, Turks, and the TNC to see If this is an irreversible 
situation. Departure would send a significant political signal, and would be interpreted as the U.S. losing confidence in 
the TNC. Initial message to the TNC would frame the departure as due to security grounds and as a temporary measure 
only. 

Polaschik said she would discuss these developments with Amb, Cretz. 


If the group departs, the contract for the boat stipulates they return to Greece. One scenario could be the group 
Stages elsewhere for a few days. 


Ops will continue to monitor the situation. 


HRC-1728 


‘“ONCLASSIFIED STATE DEPT. - PRODUCED TO HOUSE SELECT SENGHAZI COMM. 
U.S. Department of State SUBJECT TO AGREEMENT ON SENSITIVE INFORMATION & REDACTIONS, NO FOIA WAIVER. 
Case No. F-2015-04841 

Doc No, COS739968 
Date: 05/13/2015 


From: : Abedin, Huma <AbedinH@state.gov> 
Sent: Sunday, April 10, 2011 10:14 AM 

To: H 

Subject: Fw: Stevens Update (Important) 
Importance: High 


Jake may have sent but in case not. 


~~~ Original Message -—— 

From: Davis, Timmy 7 

Sent: Sunday, April 10, 2011 06:48 AM 

To: Sullivan, Jacob J; Abedin, Huma; Wells, Alice G; 3_SpecialAssistants 
Subject: Stevens Update (important) 


(S6U) Per Special Envoy Stevens: 


The situation In Ajdablyah has worsened to the point where Stevens Is.considering departure from Senghazl. The 
envoys delegation Is currently daing a phased checkout (paying the hotel bills, moving some comms to the boat, 
etc)... He.will monitor the situation to see if it deteriorates further, but no decision has been made on departure. He will 
‘walt 2-3 more hours, then revisit the decision on departure.. : 


. He recelved reports of shelling last night In Ajdabiyah as well as snipers shooting people tn the city. AFRICOM 
reported Qadhaff’s forces took the eastern and western gates of Ajdablyah, with $ vehicles at the easter gate and 50 at 
the westem gate. More Qadhafi forces are heading to Ajdablyah from Brega. 

‘The Brits report Qadhafi forces are moving from Sirte to Brega, which they interpret as preparation for another 
assault on Ajdabiyah today, 


He plans to discuss the situation further with the Brits, Turks, and the TNC to see If this is an irreversible 
situation. Departure would send a significant polltical signal, and would be Interpreted as the U.S. losing confidence tn 
the TNC. initial message to the TNC wouid frame the departure as due to security grounds and as a temporary measure 
only. 


Polaschik sald she would discuss these developments with Amb. Cretz. 


Sf the group departs, the contract for the boat stipulates they return to Greece. One scenario could be the group 
stages elsewhere for a few days. 


Ops will continue to monitar the situation. 


a 


U.S. Department of State 

Case No. F-2015-04841 

Doc No, COS739666 STATE DEPT. - PRODUCED TO HOUSE SELECT SENGHAZI COMM. 

Date: 05/19/2015, SUBJECT TO AGREEMENT ON SENSITIVE INFORMATION & REDACTIONS. NO FOIA WAIVER. STATE-SC80045049 


HRC-1729 


ALL INFORMATION CONTAINED 
MIS UNCLASSIFIED 
11-23-2016 BY J76018TS0 NST 


HRC-1730 


ALL ERI INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED 
DATE 04-04-2019 BY CSéW46B11 NSICG 


DSEGRET 


From: Abedin, Huma <AbedinH@state.gov> 

Sent: Saturday, July 4, 2009 7:42 AM 

To: H 

Subject: Fw. Follow Up: Summary of 1055 EDT DPRK Conference Call 
Fyi 


From: Beale, Courtn 

Tor Sultan cob Jf Y ri, Ha is, Chenfi> Sper Dos 
Ce: S_SpecialAssistants; Macmanus, Joseph E 

Sent: Sat Ju! 04 07:35:08 2009 

Subject: Fw: Follow Up: Summary of 1055 EDT DPRK Conference Call 


FYl on Japanese statement on North Korean missile launches. 


From: Pascual, Michael T 

To: Smith-Wilson, Shelby V; SES_DutyDeputies; Barks-Ruggles, Erica 3; Park, Pamela P; S_SpecialAssistants; Macmanus, 
Joseph E 

Ce: SES-O_SWO-Only; Rosenberger, Laura M 

Sent: Sat Jul 04 02:03:32 2009 

Subject: RE: Follow Up: Summary of 1055 EDT DPRK Conference Cal! 


r Further to Shelby’s email, Embassy Tokyo forward the following unofficial translation of a statement issued by Japanese 
MOFA:; 


MOFA released a press announcement at 13:00. (MOFA: G-0738) 
July 4, 2009 


Regarding Japan's protest against the launch of a ballistic missile by North Korea. 


Through the diplomatic route in Beljing, around 12:00 noon Japan sent North Korea the following message 
regarding today's North Korean ballistic missile faunch: 


1. The launch of a baliistic missile by North Korea Is a significant act of provocation in terms of the 
security of neighboring countries, Including our country, and a violation of UNSCR 1895, 1718 and 1874, 
Concerning today's !aunch of a ballistic missile, Japan strictly protests, and expresses sincere regret. 


2. Japan urges North Korea to Implement ali related UNSC Resoiutions, including suspension of all 
activities related to the bailistic missile plan immediately and completely. In addition, on this occasion, 
(we) strongly urge (North Korea) again to take concrete action toward the comprehensive resolution of 
related Issues, such as the abduction Issue, the nuclear Issue and the missile {ssue. 


From: Smith-Wilson, Sheiby V 
Sent: Saturday, July 04, 2009 12:13 AM 
To: SES_DutyDeputies; Barks-Ruggles, Erica J; Park, Pamela P; S_SpecialAssistants; Macmanus, Joseph E 
Ce; SES-O_SWO-Only; Rosenberger, Laura M 

e.... Foliow Up: Summary of 1055 EDT OPRK Conference Cail 


‘ ‘0 clarify a few points below: 
1 


TSEGRET_ 


HRC-1731 


bS per DOS 


From: Smith- Wilson, Shelby v 

Sent: Friday, July 03, 2009 11:42 PM 
To: SES_DutyDeputies; Barks-Ruggles, Erica J; Park, Pamela P; $ SpecialAssistants; Macmanus, Joseph E 
Cc: SES-0_SWO-Only; Rosenberger, Laura M 


Subject: Suminety of 1055 EDT DPRK Conference Call bl per Dos 


b5 per DOS 
Dan, 


HRC-4732 


bl per DOS 
bS per DOS 


Shelby Smith-Wiison 
Senior Watch Officer 


US. Department of State (S/ES-O) 
202-647-1512 


HRC-1733 


UNCLASSIFIED U.S. Department of State Case No. F-2014-20439 Doe No. C05951358 Date: 02/29/2016 


IRELEASE IN PART 
B1,1.4(8),1.4(C},1.4(D),,85,B6) 


From: af Abedin, Hurna sc ABedinH@itate.gov> 
Sant: : Saturday; July 04, 2009:7:42'AM 
Te: . H 
Subject: : Fv: Fotlow Up: Summary of 1055 EDT: DPRK Confererice Call 
lassified by DAS, A/GIS, DoS on 02/29/2016 ~ Class" SECRET ~ Reason: 1.4(B}, 1. eh. -4{D} ~ Declassify 
Fy jon: 07/03/2034 
From: Beale, Courtiey: he : 
‘Yo: Sulivan, Yaoob J; ‘fal i Abédin, Huma; Mis, Chery" 
Ce: S_ SpaciatAstistants; Macmanis, Joseph 
‘Sent: Sat Jul04:07:35:08 2009 : 
Subject: Fw: Follow Up: Summary ‘of 1055:EDT DPRK Conference Cail 


FYI on.Japanese statement 6n North Korean missile launches. 


From: Pascua}, MichaelT ; 


To: Smith-Wiksch,. Shelby V; 'SES_DutyDeputies; Barks: Ruggles, ‘Evica'); Park, Pameta: Py Ss. 5 SpecialAssistanits; "Maarianus, 
Joseph € 
Ce:  SES-O. 1 SWO-Only; Rosenbergér, taura:M 


Subject: RE: Follow, Up: Suromary‘of 1055, EDT DPRK Conference Cal 


Ow Shelby’ ‘s.email; Embassy ‘Takyo forward the following unofficial translation of a statement Issued by fapanese 
MOFA: 


MOFA released a press. announcement at 13:00 (MOFA: G-0738)- 
July.4, 2009 


Regarding Japai's protest againét the launch of a ballistic, Thisslle by North Korea: 


‘Through the diplomatic’ route: 


»Beljing, around 12:00. neon. Japan:sent:North Korea the, ‘fellowing-message. 


. #egarding today’s:North’ Korea ballistic missile launch: 


1. The laurich ‘of 2 ballistic missile ‘by: “North Korea’! 3 significant. act of provocati 


: a -terms of the: 
95, 1718-and 1874, 


Conceming today's launch of-a. ballistic missilé,. Japan strictly protests, and-expresses sincere regret. 


2. Japan.urges Noith: Korea to‘Impiement.alt related: UNSC Regolattons, induding: suspension’ ofall 


activities related to. the ballisti¢ ‘missle pian lmmediately and ‘completely. In additt 


(we). 


strongly -urge- (North Korea) again to. take cancrétée-action toward:the comprehensive resolution of. 


-rélated: issues, such as the abduction issue; the nutlearissue:and the missile issue. 


‘From: Smith-Wilson, Shelby v 

Sent: Saturday, July 04; 2009.12:13 AM 

‘Tos SES: DutyOéputies; rks-Ruiggles; Erica 3; Park, Pamela-P;'S. 5. Speciatassistants; Macmarius; Joseph i 
Ce? SES-0_SWO-Only:. Rasenberger, Laura’ 

Subject: Follow Lip: Suirimary:of 1055 EDT DPRK Conferéneé Call. 


eo”: (ew points below: 


48, 


UNCLASSIFIED U.S. Department of State Case No. F-2014-20439 Doc No. C05951358 Date: 02/29/2016. 1734 


UNCLASSIFIED U.S. Department of State Case No. F-2014-20439 Doc No. C05951358 Date: 02/29/2016 


BS 


Fro: ith-Wilson, Shelby V 


Sent; Friday, July 03, 2009 11:42 PM 

To: SES_DutyDeputies; Barks-Ruggles, Erica 1; Park, Pamela P; $_Speciatassistants; Macmanus, Joseph E 
Ce: SES-O_SWO-Only; Rosenberger, Laura M 

Subject: Suramary of 1055 EDT OPRK Conference Cait 


* os4ds 


UNCLASSIFIED U.S. Department of State Case No. F-2014-20439 Doc No. C05951358 Date: 02/29/RA 1735 
“173 


UNCLASSIFIED U.S. Department of State Case No. F-2014-20439 Doc No. C05951358 Date: 02/29/2016 


@ . 


Shelby Smnitf-Wilson 


“US: Départrient of State (5/ES-O) 
2O2G47-1512. 


Ss ‘ 
04656 
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From: H 


Sent: 11/25/2008 9:31:38 AM +00:00 

To: Huma Abedin <Huma@clintonemail.com> 
Subject: Fw: MEMO: Good idea on Afghanistan. Sid 
Attachments: hre memo afghan 112409.docx 

Pls print. 


b6 per DOS 


Sent: Tue Nov 24 17:58:21 2009 
Subject: MEMO: Good idea on Afghanistan. Sid 


November 24, 2009 


For: Hillary 
From: Sid 
Re: Afghanistan 


Bill Murray, former CIA station chief in Pakistan, one member of the small group that ran 
the war against the Soviets, has sent me a new memo based on a recent conversation we 
had. He reiterates some of the ideas I've already told you, but also has one big new idea of 
how to explain the US policy to the Afghans—holding a series of loya jirgas in Pashtun 
areas, I also like the “ask” in the last paragraph, 


Memo for Sidney 
Thoughts on Afghanistan 
From: Bill Murray 
Date: 24 November 2009 
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| I did not want to send this to you over the international open circuits so I waited to 

. write it after I got back last night. Unexpectedly, the day after I spoke with you.I spoke to 
the British Prime Minister’s adviser on Afghanistan. The introduction was made by: a retired 
British Wice Admiral at a speech we were both attending. The Vice Admiral told the other 
officer, whose name I never properly heard, about my background and involvement in both 
Afghanistan and Pakistan. Coincidentally, former President Musharraf of Pakistan was at the 
same event and spent some time with us both. The British are going through the same 
process our government is going through and the officer said they have been paying the 
Taliban for some time and know they are going to have to pay more. He asked me what I 
thought and I said paying them is just,rent and there is going to have to be somelkind of 
political agreement. I suggested a series of loya jirga in each of the areas the British are 
working in, just as I am suggesting it to you below. 

| You already know my thoughts on much of this: 
Avery simple and clearly-enunciated policy such as we came here to stop further attacks ‘on 
the US. 

. We willleave when we have located and retrieved those who attacked us, Usama Bin Ladin 
and Ayman al-Zawahiri, and received assurarices that Afghanistan will not again be a safe 
haven for those who want to attack us. 

I believe that the message needs to be short, clear and perfectly-understandable to the 
Pathan/Pushtun ethnic group that makes up 40% of the population and that is currently 
fighting us. I also'believe that the best way to get the point across is to have a series of 
tribally based loya jirga in the Pathan/Pushtun areas. Forget about a big national level 
meeting in Kabul. That will just be seen as an attempt by the US to consolidate the power 
of Hamid Karzai or to create some kind of national strong central structure these people will 
never accept. They have and can live with a weak central.government and powerful 
regional governments. They have never had or accepted any attempt to establish a strong 

_ central government. The Pathans are divided between a northern and southern group . 
(hence the 2 different ways the word is.written and pronounced) and further divided along 
tribal lines. They will not agree as a unified group because there is no unity among them, 
but they can be dealt with tribe by tribe and region by region. We will inevitably have to 
pardon leaders who are currently shooting at us, and we just néed:to get used to the idea. 
Not long ago I listened to a US military briefer describing political groups such as the Hizbi 
Islami, as terrorist organizations. I am sure he had ho idea that there is more than one 
Hizbi Islami (literally Party of Islam) or that the US aided both of them during the struggle 
against the Soviet Union. We cannot win, or extricate ourselves from, this kind of war with 
this level of ignorance. We need to get down to where the Afghans are and deal with them 
in terms they understand. We also cannot get anywhere by sending out as our 
representatives people who cannot even attempt to pronounce their names. I-heard the 
same briefer try to pronounce Gulbuddin Hekmatyar’s name then give up and say “we just 
call him|Gubdin.” We need to create a small group of diplomats, intelligence officers and 
military |- teams led by the diplomats not the military - who really have some areajand 
cultural knowledge and then use them to deal with the Afghans. The loya jirga is not pretty 
nor is It lefficient but it Is, in its own way, democratic and it is the Afghan way to:make 
arrive at group consensus. 

Talso believe that we should demand that Bin Ladin and al-Zawahiri be turned over to us. If 
we try té leave without getting these guys we will be seen as weak and irresolute and our 
word on lother issues will not be trusted. Despite what they say about not believing! that 
these guys were behind 9-11 the Afghan leaders.know the truth. They will also say'they 
cannot violate their own code of honor under which the Arabs were offered sanctuary. 
Anything and everything is for sale in Afghanistan if we can just fix the price. The al- -Qaida 

. leaders Violated the sanctuary given to them by bringing their war to Afghanistan. Any 
obligations the Afghans felt toward them have run out. 
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From: Huma Abedin 

Sent: 3/9/2011 12:56:35 PM +00:00 

To: H <HDR22@clintonemail.com> 

Subject: Re: H: serious trouble for Libyan rebels. Sid 
Yes . 

From: H 


Sent: Wednesday, March 09, 2011 07:54 AM 
To: Huma Abedin 
Subject: Fw: H: serious trouble for Libyan rebels. Sid 


Can you print for me w/o any identifiers? 


From ava Roce ——! mt poses 
Sent: Inesday, March 09, F 


To: H 
Subject: H: serious trouble for Libyan rebels. Sid 


March 9, 2011 


For: Hillary 
From: Sid 
Re: Serious problems for Libyan rebels 


The latest report: 


(Source Comment: Private individuals in Europe, with ties to the leadership of the National 
Libyan Council (NLC), plan to urge the NLC military committee to consider hiring private 
troops (mercenaries) to support, organize, and train the rebel forces in Libya. These 
individuals betieve that NATO and the Western allies will not make a decision to aid the 


HRC-1742 


rebels until they are faced with a humanitarian disaster, and that the revolution is!in _ 
danger: At the same time, these individuals believe a small number of private troops could 
turn the battle against Qaddafi’s forces, particularly if they are equipped with sophisticated 
anti-aircraft weapons. These individuals also believe that experienced troops will have little 
troubleshooting down Libyan aircraft.and attack helicopters. In the opinion. of these 
sources, this would have a devastating psychological affect on Qaddafi’ i's troops. di 

i} 

; | 

During the afternoon of March 8, individuals with access to Saif al Islam Qaddafi stated in 
confidence that Muammar al Qaddafi is increasingly confident that his troops can drive back 
rebel forces attempting to advance on Tripoli from Benghazi. According to these ' 
individuals, Qaddafi continues to believe that, if he and his supporters:can hold onito power 
for the next two weeks, the morale of the rebel forces will begin to falter, while-the 
opposition NLC, and the tribal leaders will begin to fight among themselves. 

Knowledgeable individuals with access to the European security community state that they 
believe| reports that Qaddafi may be preparing to flee the country are false.. That said, they 
add that, in-their opinion, the NATO surveillance of Libya will be able to tell if and when : 


‘Qaddafi does prepare to leave. They add that to date there appears to be no activity 


indicating that such a move is about to take place. 


(Source Comment: According to knowledgeable individuals, military commandersiloyal to 
Qaddafi, including his son: Khamis, are surprised that NATO and the other Western military 
organizations have not taken a more direct hand in the fighting. They continue to be -- 


: concerned over'this possibility, particularly in the wake of the capture of Dutch Marines 


west of, Tripoli, and reports of British Special Forces troops being detained by rebel forces 
near Benghazi, while attempting to contact the NLC. That said, these military. commanders 
still believe that NATO, and particularly the United States are using satellite. imagery and 
other sophisticated surveillance devices to monitor the military situation in Libya. ‘They 
have. ‘warned Qaddafi, that although the Western powers appear to be reluctant to, enter the 
fighting, this surveillance .can identify anti-aircraft facilities and other sensitive targets, and 
allows NATO commanders to move quickly if they decide to implement a.no fly: zone over 
Libya; or become more directly involved in aiding the rebels. Qaddafi remains confident 
that NATO" and the Western allies will continue to.debate a course of action for the 
immediate future. He also assured his commanders that neither the Arab League nor the 


“Organization of African Unity (OAU) would participate in, or support any attack oni 


Libya. Finally, according to these sources, Qaddafi believes that Russia and China’ will not 
support any action that involves increasing the military role the United States or NATO.) 


In Benghazi, individuals with access to the NLC state in confidence that despite the best 
efforts of the NLC, a unified governing body has yet to emerge. At present, NLC - 

leader |Mustafa Abdel Galil is experiencing limited success in his efforts attract members of 
the academic and student movements to the NLC. Galil is from the town of Albeida, 
northeast of Benghazi and has family and traditional ties to many academic and civic 


leaders in the region. The leaders of the el -Senussi family continues to 
assert that they should be the basis for an interim 
government. Galil and his supporters reject this, and onlyione 
member of the el-Senussi has heen allowed to work with the 
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NLC. (Source Comment: This individual was imprisoned by 
Qaddafi for many years and is respected by all sides.). 


PORTS: 


Individuals with. access to the military committee of the NLC stated in confidence that as of 
March 8 the major Libyan oi! ports of Ras Lanuf and Brega in the eastern part of the country 
are closed. The Libyan army fought rebels for contro! of Ras Lanuf on March 7 and a rebel 
official reported that a captured Libyan Army officer stated that Qaddafi would attack oi! 
fields if he believes that the rebels were winning the conflict. 


On Saturday, March 5 a Turkish owned vessel left Ras Lanuf with over 500,000 barrels of 
crude oil. Sources with access to the NLC stated that this was the last cargo vessel to sail 
from that port. (Source Comment: These individuals said that on March 7 the NLC received 
word that the port of Tobruk was operational. Various sources reported on March 7 that the 
general cargo ports of Tripoli, Benghazi and Khoms were operational.) 


The NLC sources add that many of the oil ports appear to be closed, and too dangerous to 
use. During the week of February 28 London's marine insurance market added Libya to a 
list of areas deemed high risk. 


OIL PRODUCTION 

According to The International Energy Agency, before the uprising Libyan wells pumped 
around 1.6 million barrels per day (bpd). As of Friday, 1 million bpd of this oi! production 
was lost, after foreign oil firms evacuated their workers. 
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@.:: H <hrod17@clintonemail.com> 
ent: Friday, June 17, 2011 8:21 AM 
To: ‘sullivanij@state.gov’ 
Subject: | bS per DOS 


If they can't, turn into nonpaper w no identifying heading and send nonsecure. 


From: Sullivan, Jacob J [mailto:SullivanJJ@state.gov] 
Sent: Friday, June 17, 2011 08:17 AM 
To: H 


sibject: ef] *8 pesos 


They say they've had issues sending secure fax. They're working on it. 


From: Sullivan, Jacob J 
Sent: Friday, June 17, 2011 08:00 AM 


To: 'HDR22@clintonemail.com’ <HDR22@clintonemail.com> 
Subject: Re: bS per DOS 


21! Checking 
@::: H [mailto: HDR22@clintonemail.com} 
nt: Friday, June 17, 2011 07:52 AM 


To: Sullivan, 
Subject: Re! bS per Dos 


I didn't get the TPs yet. 


From: Sullivan, Jacob J [mailto:SullivanJJ@state.gov] 
Sent: Thursday, June 16, 2011 05:51 PM 

To: H 

Subject: Fw: Pian for PC tomorrow 


You'll get tps this eve. They're coming together. 


From: Spence, Matthew J, [mait¢ J B6 per Dos 
Sent: Thursday, June 16, 2011 04:15 PM 


Ta: Sulli 
Subject! b5 per DOS 
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(SHuma Abedinjt 


“From: Jon Davideon 
i Sent Thursday, September 20, 2012 06:02 PM) 
\To: Huma Abedin) 
‘subject: Re: 


DrytQusd 74a P oUt: 


(Well be at the Essex house in 10 mins. 


— Original Message - — 


(From: Huma Abedin; 


:Sent: Thursday, September 20, 2012 06: 00 PM! 


(To: Jon Davidson} 
Subject: 
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‘When does wic arrive? | might need to stash some sensttive stuff in hi 
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FD-340 (Rev. 4-t 1-0 


File Number 


ALL INECRMATION CONTAINED 
WHEREIN IS UNCLASSIFIE. 
DATE 11-13-2017 BY Cc 


b3 


AQ bIE 


Field Office Acquiring Evidence WE 
124 


Serial # of Originating Document 


Date Recelved Vara 


From 


(Name of Contributor/interviewee) 


(Address) 


By 


To Be Retumed [] Yes Po 


ReceiptGiven (1 Yes ho 
Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 

io 


O Yes 
Federal Taxpayer Information (FTI) PA 
MID YEAR- EXAM; 


O Yes 


b6 
bIC 


( A45 


MISHANDLING OF CLASSE FTE 


Reference: 


(Communication Enclosing Material) 


“Abs Qo Original notes re entrar 
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ALL ¥BI INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED 
DATE 12-05-2016 BY 376419730 NSICG 


WE) (FBI b6_ 
BIC 
From: 
Sent: 
Te: we) (eer) 
} 
Subject: FW: Letter 
Attachments: 2015.10.28 - DOJ to Wilmer.pdf 


For the file. More to follow. 


From: 

Sent: Wednesday, October 28, 2015 2:03 PM 

To: Strzok, Peter P. (WF) (FBI); Moffa, Jonathan C. (CD) (FBI kocc) (Fen{_«(KRO) (FBI) 
aC! a RSD) GNC) 


Subject: FW: Letter b6 per FBI, NSD 
b7C per FBI, NSD 


FYI. 


b6 per FBI, NSD 
b7C per FBI, NSD 


Attached find a letter responding to your letter of October 16, 2015. 
Best. 


| 


b6 per NSD 
Counterintelligence and Export Control Section b7C per NSD 
National Security Division 
U.S. Department of Justice 


Phone] 
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ALL FBI INFORMATION CONTAINED 
BEREIN 15 UNCLASSIFIED 
DATE 12-05-2016 BY J76c18Ts0 NSICG 


U.S. Department of Justice 


National Security Division 


Washington, D.C. 20530 


BY EMAIL 
bé 
b7C 


October 28, 2015 


Deaf] bs 
bIC 

This letter confirms receipt of the letter you sent me on October 16, 2015, as well as the enclosed : 

spreadsheet identifying thirty (30) emails produced to the Federal Bureau of Investigation (FBI) by Mr. 

Cooper that did not meet our agreed-upon criteria for production. As we have discussed, the FBI will 

mark the thirty emails you identified in this spreadsheet such that, going forward, they will not be 

reviewed on any image of the materials that is in the possession of the FBL 


Sincerel 


b6 per NSD 
b7C per NSD 
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ALL FBI INFCRMATION CONTAINED 
HEREIN IS UNCLASSISIED 
12-06-2016 Bi 18780 NSICS 


(WE) (FBI) : 


b6 
From: . bic 
Sent: 
To: (wer) Fen___kwr) 
Subject: FW: Letter 
Attachments: Kendall Oct 16 Letter tol___ PDF 


Original Message-- 


From: 


Sent: Friday, October 16, 2015 3:@@ PM 
To: Strzok, Peter P. (WF) (FBI); Moffa, Jonathan c. (cD) (FBI);[ ——————=«d; (GC) (FBT); 
) (FBI) 
Cr (sp) (34); [___] (usavae) us avae) 
Subject: FW: Letter b6 per FBI, NSD 
b7C per FBI, NSD 


All, 


See attached letter from W&C. Len be in touch to give you details for pick up, but 
Katherine Turner should be available to provide these items at 4:0@ today. Also note that 
the email below includes an addition to the privilege list provided by W&C. We have already 
worked thr e financial consultant issue, but please make sure that the email is passed 
along to i, the DOJ filter attorneys for their records. 

b6 per NSD 
Thanks b7C per NSD 


[J 


veers Original Message----- 


From: Kendall, David [mailto:DKendall@wc.com] 
Sent: Friday, October 16, 2015,2:42 PM 

To: (NSD) 

Ce: (NSD) 

Subject: Letter 


b6 per NSD 
Please see the attached letter. 
I write here to supplement my September 25, 2015 letter setting forth the list of individuals 
with whom Secretary Clinton may have communicated in a privileged context. 
should be added to the “Personal Financial Consuitant" section of that list- lank you. 
Sincerely, 


David Kendall 


David E. Kendall 

Williams & Connolly LLP 

725 Twelfth Street, N.W., Washington, DC 299e@5 
(P) 202-434-5145 | (F) 202-434-5929 


HRC-2768 


dkendall@wc.com | www.wc.com/dkendall 


This message and any attachments are intended only for the addressee and may contain 
information that is privileged and confidential. If you have received this message in error, 
please do not read, use, copy, distribute, or disclose the contents of the message and any 
attachments. Instead, please delete the message and any attachments and notify the sender 
immediately. Thank you. 
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ALL FBI INFORMATICN CONTAINED 
HEREIN IS UNCLASSIFIED 
DATE 12-08-2016 BY 276318780 NSICG 


LAW OFFICES 


WILLIAMS & CONNOLLY LLP 
725 TWELFTH STREET, N.W. 


WASHINGTON, D. C. 20005-5901 pusams 4020-1 
DAVID E. KENDALL REN NUL CONNOLLY GOBRIO70) 
(202) 434-5145 (202) 434-5000 
dhendallew 
endgewecom. FAX (202) 434-5029 
October 16, 2015 
BY E-MAIL 


——— b6 per NSD 
U.S. Department of Justice b7C per NSD 


National Security Division 
905 Pennsylvania Avenue NW 
Washington, DC 20530 


Dea{___] 


Pursuant to our conversation yesterday, this letter will give the Department of Justice 
consent (1) to search any files of Secretary Clinton, dated January 21, 2009 to February 1, 2013, 
that may be located on the equipment provided to the FBI today (specifically, a 32GB iPad, a T- 
Mobile Blackberry, and an AT&T Blackberry (the “devices”)) for evidence relevant to the 
investigation of the matter referred by the Inspector General of the Intelligence Community; and 
(2) to conduct a forensic analysis of the devices, for purposes of identifying evidence relevant to 
that investigation. 


In voluntarily providing these devices to the Department, we, of course, are doing so 


solely with regard to any files of Secretary Clinton that may be located on the devices, and not 
with regard to the files of any other individuals. 


Further, we note that i ices with the understanding that, as stated in 
your October 4, 2015 letter , nn me, all items voluntarily produced to the rs c 
FBI will be retumed to the owners or disposed of consistent with FBI policies and procedures at 
the conclusion of its investigation. 


__Sinterely, . 


£ 


avid &. Kendall 
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ALL FHI INFORMATION CONTAINED 
BEREIN IS UNCLASSIFIED 
DATE 12-08-2016 BY J76218T80 WSICc 


WF) (FBI bs 
7c ™ 
From: 
Sent: r 28, 2015 3:06 PM 
To: (we) By ewe) 
Subject: FW: Kendall Letter 
Attachments: Kendall Oct 14 Letter tol___|PDF 
To file 
b6 per FBI, NSD 
b7C per FBI, NSD” 
From 


Sent: Wednesday, October 14, 2015 12:57 PM 


To: Strzok, Peter P, (WF) (FBI); Moffa, Jonathan C. (CD) (FBI); kro) (ren ———«(KGc) (Fer) 
Ce 


NSD) (MD); (USAVAE), USAVAE) 
Subject: FW: Kendall Letter 


See attached letter. We can discuss later today or tomorrow. Hoping we can sit down to discuss a few items {was 
going to check availability. 


From: Kendall, David [mailto:DKendall@we.com] 

Sent: Wednesday, October 14, 2015 12:24 PM 

To: (NSD) b6 per NSD 
cc: INSD) b7C per NSD 
Subject: Kendall Letter 


vea{__] 


Please find attached a letter, which | am sending by post and by e-mail. 
Sincerely, 
David Kendall 


David E. Kendall 

Williams & Connolly LLP 

725 Twelfth Street, N.W., Washington, DC 20005 
(P) 202-434-5145 | (F) 202-434-5029 
dkendall@we.com | www.wc.com/dkendall 


This message and any attachments are intended only for the addressee and may contain information that is privileged and 
confidential. If you have received this message in error, please do not read, use, copy, distribute, or disclose the contents of the 
message and any attachments. Instead, please delete the message and any attachments and notify the sender immediately. Thank 
you. 
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LAW OFFICES 
WILLIAMS & CONNOLLY LLP 
725 TWELFTH STREET, N.W. 
DAVID E. KENDALL WASHINGTON, D. C. 20005-5901 EDWARD BENNETT WILLIAMS U920-1988) 
PAUL R. CONNOLLY (922-1978) 
(202) 434-5145 (202) 434-5000 


dkendali@we.com 
FAX (202) 434-5029 


October 14, 2015 


BY EMAIL AND FIRST CLASS MAIL 


- . b6 per NSD 
United States Department of Justice b7C per NSD 
National Security Division 
600 E Street, NW 


Washington, DC 20530 


Dew] 


We have made a good-faith effort to identify equipment or devices that might 
contain or might have contained emails from the time period January 21, 2009 to 
February 1, 2013 (the “relevant time period”) to or from any @clintonemail.com domain 
account assigned to former Secretary Clinton. Based on information we have access to, 
we can report the following. 


We have identified two Blackberry devices and one iPad that we believe the 
former Secretary may have used during the relevant time period. 


In connection with your request, we also note that we understand that in 2008 
and early 2009, an Apple computer stored in the Clinton’s Chappaqua home was used as 
an email server. We have been unable to determine whether that Apple computer ever 
functioned as a server for the @clintonemail.com domain account in early 2009, prior to 
the March 2009 installation of the Dell server that we provided to the Department of 
Justice in August 2015. Based upon our best information, we do not believe that it did, 
but cannot rule out that possibility. We believe that the Apple computer was repurposed 
after the installation of the Dell server in March 2009, to serve as a personal computer for 
household staff. The Apple computer was replaced in 2014 by an iMac, to which its then- 
existing data was transferred. Thereafter, the hard drive of the Apple computer was 
discarded. The iMac is currently in daily use by household staff, including aides to 
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WILLIAMS 8 CONNOLLY LLP 


b6 per NSD 
b7c per NSD 
etober 14, 2015 


Page 2 


President Clinton, and is also used primarily to store personal family files, We have 
conducted a review of the names and types of files in user-visible folders on the iMac and 
have found no emails from the relevant time period belonging to the former Secretary. 


In the event that we become aware of any other equipment or devices that 
contain or contained any emails from the relevant time period to or from any 
@clintonemail.com domain account assigned to former Secretary Clinton, we will inform 
you. : 


Sincerely, 


a 


David E. Kendall 
DEK/bb 
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ALL FBI INFORMATION CONTAINED 
HEREIN IS UMCLASSIFIED 
DATE 12-05-2016 BY J76918T80 NSICG 


WE) (FBI bs 


b7C 
From: LT kro) (81) 
Sent: r28, 2015 3: 
Te: Cn ace eenf_______wry 


Subject: FW: Consent Letter 
Attachments: DOD - 10-7-15 letter. pdf 
To file 


b6 per FBI, NSD__ 
From b7C per FBI, NSD 


Sent: Wednesday, October 07, 2015 6:42 PM 


To: ) (FBI); M C. (CD) (FBI): RO) (FBI); OGC) (FBI 
ERO a Eyres) ono Ios 


Subject: FW: Consent Letter 


FYI. 


b6 per NSD 
bIC per NSD 


Attached please find a letter describing the parameters of our clients’ consent to the FBI taking possession of personal 
electronic information. 


Thanks very much, 


be 
b7c 


LATHAM & WATKINS LLP 
555 Eleventh Street, NW 
Suite 1000 

Washington, D.C. 20004-1304 
Direct Dial} 


This email may contain material that is confidential, privileged and/or attorney work product for the sole use of the 
intended recipient. Any review, reliance or distribution by others or forwarding without express permission is strictly 
prohibited. If you are not the intended recipient, please contact the sender and delete al! copies. 


Latham & Watkins LLP 
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ALL FBI INFORMATION CONTAINED 
HEREIN 18 UNCLASSI£ IED 
DATE 12-05-2016 BY J76318T80 NSICG 


S85 Eleventh Street, NW., Suite 1000 bé 
Washington, DIC, 20004-1304 
‘Tol: +1.202.637.2200 Fax: +1.202.637,2201 bic 


‘www tw.com 
FIRM / AFFILIATE OFFICES: 
LATHAM&WAT KIN Sur Abu Ohabl Milan 
Barceiona Moscow 
Bejing Munich 
Boston _ New Jamey 
Brussels New York 
Century City Orange County 
Chleago Parte 
Dubal Riyadh 
Dissekiot © Roma 
Franihurt San Diego 
Hamburg San Francisco 
Hong Kong = Shanghai 
Houston Slilcon Valley 
London Singapore 
Las Angeles Tokyo: 
Madtid Washington; D.C. 
. October 7, 2015 * 
VIA ELECTRONIC MAIL 
b6 per NSD 
United States Department of Justice b7C per NSD 
National Security Division 
600 E Street Northwest 


Washington, DC 20530 


Re: Grant of Limited Consent To Take Possession of Personal Electronic Information 


b7C per NSD 


On beta ofoureenaf nf 
we grant the Federal Bureau of Investigation (“FBI”) limited consent to take possession of our 


clients’ personal information stored on the PRN Server referenced in your letter dated October 4, 
2015. Our clients also consent to the FBI conducting a forensic analysis on the PRN Server for 
the purpose of determining whether the PRN Server has been compromised. We also write to 
confirm the parameters of our clients’ limited consent. - 


Our clients do not consent to any review or search of their personal information contained 
on the PRN Server, which includes but is-not limited to email, calendar entries, contacts, text or 
BBM messages, and task lists. It is our understanding that the FBI must take possession of this 
personal information because the information cannot be removed from the PRN Server 
consistent with the FBI’s need to determine whether the PRN Server has been subject to 
intrusion or otherwise compromised. We further understand that the FBI does not intend to 
review or search our clients’ personal information contained on the PRN Server. 


As discussed, our clients are particularly interested in minimizing the amount of time that 
the highly-personal information on the PRN Server is possessed by the FBI Accordingly, we 
understand that the FBI will return or dispose of all of our clients’ personal data, consistent with 
its policies and procedures, as soon as possible after the close of its investigation. 
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October 7, 2018 
Page 2 


LATHAMsWATKINSw 


Thank you for your consideration. Please contact me if you have any concerns about this 
limited consent or our clients’ voluntary production of their personal information. 


bé 
b7c 
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ALL FBI INFORMATION CONTAINED 
BEREIN 15 UNCLASSIFIED 
LATE 12-05-2016 BY J76c18T80 NSICG 


(WE) (FBI) re — 
From: [fro (FBI) 


Sent: r 28, 2015.3. 

To: ) jweyceen{_ wey 
Subject: : 

Attachments: October 4, 2015 WC Letter (Executed). pdf 


To clarify for all, | am sending all emails from DOJ containing letters to/from counsel for the file. 


From: 
Sent: Sunday, October 04, 2015 7:54 AM 


To: Strzok, Peter P. (WF) (FBI); Moffa, Jonathan C. (CD) (FBD: Ro)(Fen{——————«itocc) (Ft) 
cel jusavacy PP usa (NSD) (MD) 
Subject: FW: W&C Letter (Executed) b6 per FBI, NSD 


b7C per FBI, NSD 


Signed follow-on letter to W&C. 


From: NSD) 
Sent: Sunday, October 04, 2015 7:39 AM bé per FBI, NSD 


To: Kendall, David (DKendaill@we.com); kturner@we.com 
ca: (NSD) b7C per FBI, NSD 


Subject: W&C Letter (Executed) 


David and Katherine, 
Attached is the signed follow-on letter to Williams & Connolly. 


Best, 


b6 per NSD 
BIC per NSD 


Counterintelligence and Export Control Section 
National Security Division b6 per NSD 
U.S. Department of Justice b7C per NSD 


2 


HRC-2777 


ALL EBI INFORMATION CONTAINED 


HEREIN IS UNCLASSIFIED 


DATE 12-06-2016 BY J76318T80 NSICS 


U.S. Department of Justice 


National Security Division 


Washington, D.C. 20330 


BY EMAL 


David E. Kendall, Esq. 
Katherine M. Turner, Esq. 
Williams & Connolly LLP 
725 Twelfth Street, N.W. 
Washington, DC 20005 


October 4, 2015 


Dear-Mr. Kendall and Ms. Turner, 


This letter supplements the letter I previously sent to you today describing certain items — including the 
server administered by Platte River Networks (the “PRN Server”), equipment associated with the PRN 
Server (the “PRN Server Equipment”), and equipment associated with the “predecessor server” — that 
you have agreed to voluntarily produce to the Federal Bureau of Investigation (“FBI”). Consistent with 
your letter dated October 1, 2015, we have also agreed that you are providing consent to search, for 
evidence relevant to the FBI investigation of the matter referred by the Inspector General of the 
Intelligence Community, all of Secretary Clinton’s files dated from January 2, 2009 to February 1, 2013 
located on the PRN Server, PRN Server Equipment, and equipment associated with the “predecessor 
server.” 


On July 30, 2015, the FBI delivered to PRN a letter requesting that it preserve records related to the 
@clintonemail.com account. We understand that PRN, through Williams & Connolly LLP, also received 
other requests to preserve records related to the @clintonemail.com account, including a July 29, 2015 
preservation fetter from Senator Ron Johnson, Chairman, United States Senate Committee on Homeland 
Security and Governmental Affairs; a May 26, 2015 preservation letter from Steve A. Linick, Inspector 
General, Department of State and I, Charles McCullough, It, Inspector General, Intelligence Community; 
and a March 3, 2015 preservation {etter from Representative Trey Gowdy, Chairman, House of 
Representatives Select Committee on Benghazi. Once taking custody of the items referred to in today’s 
letters, the FBI wil! maintain them in an appropriately secure manner. We believe such maintenance 
satisfies any preservation obligations you and PRN may have, 
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Finally, this letter confirms our understanding that any other equipment or devices not previously 
provided to the FBI, whether or not previously disclosed, that contain or contained any emails from the 
time period January 21, 2009 to February 1, 2013 to or from any @clintonemail.com domain account 
assigned to Secretary Clinton, will be identified to us as soon as possible and no later than October 9, 
2015. 


Sincerely, 


b6 per FBI, NSD 
b7C per FBI, NSD 


a 
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ALL FRI INFORMATION 
BEREIN IS UWCLASSIF 
DATE 12-08-2016 B c18T80 WEICC 


- be 
(WF) (FBI bie 


From: Lo Jroyeesn 


CONTAINED 


Sent: r 28, 2015 a 

Subject: 

Attachments: October 4, 2015 Server Letter (Executed).pdf 
To file 


b6 per FBI, NSD 


From [ns0) [nate J bre! por FB, ND 


Sent: Sunday, October 04, 2015 7:53 AM 


To: ) (FBI); Moffa, Jonathan C. (CD) (FBI (RO) (FBI) (GC) (FBI) 
a (oT NSD) (JMD) ae 


Subject: FW: Letter (Executed) 


Signed letter to Latham and W&C, 


From (NSD) 
Sent: Sunday, October 04, 2015 7:37 AM 
To: i HW 
Ce: 


Subject: Letter (Executed) 
: b6 per FBI, NSD 


F ‘ : b7C per FBI, NSD 
David, Katherine, and | Pi , 


Attached is the signed letter concerning the voluntary production. 


— 


b6 per NSD 
b7C per NSD 
Counterintelligence and Export Control Section 


National Security Division 
U.S. Department of Justice 


Phone{___ 


HRC-2780 


ALL FBI INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED 
CATE 12-05-2016 BY 376318T380 NSICG 


U.S. Department of Justice 


National Security Division 


Washington, D.C, 20530 


BY EMAIL 


David E. Kendall, Esq. 
Katherine M. Turner, Esq. 
Williams & Connolly LLP 
725 Twelfth Street, N.W. 
Washington, DC 20005 


— : 
Latham ‘atkins b7c 


555 Eleventh Street, N.W. 
Suite 1000 
Washington, DC 20004 


October 4, 2015 


Dear Mr. Kendall, Ms. Turner, ad_ sid bé 


b7c 


This letter confirms your agreement to voluntarily produce to the Federal Bureau of Investigation (“FBI”) 
certain items described below that contain or contained emails to or from Secretary Clinton’s 
@clintonemai}.com accounts for the time period January 21, 2009 to February I, 2013. 


First, you will voluntarily produce the server and related equipment which Platte River Networks 
(“PRN”) set up in June 2013 (the “PRN Server” and “PRN Server Equipment,” respectively). The PRN 
Server Equipment includes the following items: any onsite backup hardware, including but not limited to 
hardware purchased from Datto, Inc.; any remote backup content, including but not limited to content 
stored at Datto, Inc.; any firewall and firewall logs; any switches and traffic logs; and any intrusion 
detection system and logs. 


The production of the PRN Server and PRN Server Equipment will occur in two stages (the “first stage” 
and “second stage,” respectively), according to the procedures described herein. In the first stage, which 
is currently scheduled for October 3, 2015, the FBI will be provided access to the Equinix facility at 275 
Hartz Way, Secaucus, New Jersey (the “Secaucus Facility”), which houses the PRN Server and PRN 
Server Equipment. While onsite at the Secaucus Facility, the FBI will collect data, including but not 
limited to memory, running processes, network connections, and virtual machines and their contents, 
from the PRN Server and PRN Server Equipment while they are running. FBI personnel will make every 
effort to ensure that there are no service disruptions on the PRN Server during the first stage acquisition. 


The FBI will retain a full copy of all data collected in this “first stage,” and will also provide a full copy 


of this data to be maintained in a secure space at the Litigation Security Group, Department of Justice, at 
145 N Street NE, Washington, DC 20002. Properly cleared individuals who you identify will be able to 
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access this image as necessary and appropriate to the representation of their clients, and the clients 
themselves, if properly cleared, may also obtain access to the image. 


In the period between the first stage and the second stage, the FBI will begin, and attempt to complete, the 
extraction of specific email databases from the PRN Server, as further detailed below, in an appropriate 
forensic facility. In the second stage, which is currently scheduled to occur on or about October 9, 2015, 
persons identified by Williams & Connolly LLP will ensure onsite that the domains located on the PRN 
Server can send and receive emai] on a new server and associated equipment acquired by PRN 
(hereinafter the “New Server”), The FBI will at that time, or as soon as possible thereafter, provide 
historical email content from the PRN Server to persons that you identify. Finally, the FBI will shut 
down the PRN Server and any PRN Server Equipment that is running and collect the PRN Server and 
PRN Server Equipment. 


As we have agreed, all historical email content residing on the PRN Server may be transferred to the New 
Server with the following exceptions:’ 


only content dated prior to January 


21, 2009, and from February 2, 2013 to the present, may be transferred to the New Server 
2. For the email a all email content may be transferred to 
the New Server with the exception of six (6) identified emails that may reside in the account. FBI 


technical personnel will identify these six (6) emails by the date and time of the messages. These 

personnel will not review any other content, and the FBI investigative team will have no access to 

the account. If present on the PRN server, the six (6) identified emails will be retained, but not bé per NSD 

searched, by the FBI. bic per NED 
3. For the former Secretary’s accounts on the @clintonemail.com domain, only content dated prior Pr 

to January 21, 2009, and from February 2, 2013 to the present, may be transferred to the New 


Server. 
4. For the accound_ SS _ionly content dated prior to January 21, 2009, and from 


February 2, 2013 to the present, may be transferred to the New Server. 


You are also providing consent for the FBI to conduct a forensic analysis, for purposes of identifying 
evidence relevant to its investigation of the matter referred by the Inspector General of the Intelligence 
Community, of the entire PRN Server and PRN Server Equipment. You are further providing consent to 


' While there is no current basis to believe that any of the historical email content to be transferred to the New 
Server contains any ciassifted information, if the FBI’s continued investigation reveals that any of the historical 
email content transferred to the New Server potentially contains any classified information, we will take all 
necessary steps lo appropriately address the situation. 


? Although the historica? content from a accounts, b6 per NSD 
subject to the date restrictions set forth above, may be eligible for migration to the New Server, counsel al Latham & b7C per NSD 
Watkins LLP has requested that the historical content for these accounts, which are now inactive, be transferred toa 

hard drive or other portable media rather than to the New Server. 


> Counsel from Latham & Watkins LLP has advised that these six (6) emails from the i 
count may also be located in the For the email : 
| 


domain| fail email content may be transferred to the New Server with the exception of these six 
(6) identified emaits that may reside in the domain. FBI technical personnel will identify these six (6) emails by the 


date and Lime of the messages. These personne! will not review any other content, and the FBI investigative team b6 per NSD: 
wall have no aecess tot main, Irpresenton the PRN sevverinthel— |g per ND 


domain, the six (6) identified emails will be retained, but not searched, by the FBI. 


j 
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search any unallocated space on the PRN Server and PRN Server Equipment for evidence within 
Secretary Clinton's files dated from January 21, 2009 to February [, 2013 that is relevant to the FB1 
investigation of the matter referred by the Inspector General of the Intelligence Community. Except as 
provided elsewhere, your consent does not extend to any other email content on the PRN Server and PRN 
Server Equipment. 


Second, this letter also confirms your agreement to voluntarily produce to the FB] on October 3, 2015, all 
equipment associated with the “predecessor server” that was voluntarily produced to the FBI on August 
12, 2015, The equipment associated with the “predecessor server” includes but is not limited to the 
following items, which are currently in PRN’s possession in the Secaucus Facility: one (1) Cisco Network 
Attached Storage; one (1) Delt Blackberry server; and one (1) external USB hard drive. You are also 
providing consent for the FB] to conduct a forensic analysis, for purposes of identifying evidence relevant 
to its investigation of the matter referred by the Inspector General of the Intelligence Community, of the 
equipment associated with the “predecessor server.” 


At the conclusion of this investigation, all items voluntarily produced to the FBI will be returned to the 
owners or disposed of consistent with FBI policies and procedures. 


Sincerel 


b6 per NSD 
b7C per NSD 


cc: Miguel E. Rodriguez, Esq.; 
Karen L. Dunn, Esq. 
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ALL FBI INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED 
DATE 12-05-2016 BY J7éa1sTsO NSICG 


bé 
(WF) (FBI ne 
From: [fro FB!) 
Sent: Wednesday, October 28, 2015 3: 
Ter , we) e6nf wr 


Subject: : r 
Attachments: 2015.10.02 Letter {por 


b6 per FBI, NSD 
Fromf b7C per FBT, NSD 
Sent: Friday, October 02, 2015 5:10 PM 


To: (WF) (FBI); Moffa, Jonathan C. (CD) (FBI) Ro)(Fetyy ~~ KOGC) (FBI) 
ce NSD) (IMD); (USAVAE) (USAVAE) 
Subject: FW: Kendall Consent Letter 


FYI. Consent for server equipment from predecessor server and for Datto backup. 


From: Kendall, David [mailto:DKendall@we.com] 
Sent: Friday, October 02, 2015 3:54 PM 


To: (NSD) b6 per FBI, NSD 
Cc NSD); Turner, Katherinel | b7C per FBI, NSD 


Subject: Kendall Consent Letter 


deaf 


Attached please find one letter. 
Sincerely, 
David Kendall 


David E. Kendall 

Williams & Connolly LLP 

725 Twelfth Street, N.W., Washington, DC 20005 
{P} 202-434-5145 | (F} 202-434-5029 
dkendall@wc.com | www.we.com/dkendall 


This message and any attachments are intended only for the addressee and may contain information that is privileged and 
confidential. if you have received this message in error, please do not read, use, copy, distribute, or disclose the contents of the 
message and any attachments. Instead, please delete the message and any attachments and notify the sender immediately. Thank 
you. 
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LAW OFFICES 
WILLIAMS 8 CONNOLLY LLP 
725 TWELFTH STREET, N.W. 
WASHINGTON, D. C. 20005-5901 EDWARD RENNETT WELIAMS 920-1088) 


DAVID E. KENDALL 
PAUL R. CONNGLLY ap2z-1978) 


dkedeteccen (202) 434-5000 
FAX (202) 434-5029 


October 2, 2015 


VIA E-MAIL AND FIRST CLASS MAIL 


United States Department of Justice 

National Security Division . b6 per NSD 
600 E Street, NW b7C per NSD 
Washington, D.C. 20530 


i 


Pursuant to our recent conversations, this letter provides the Department of Justice 
with consent to search any of former Secretary Clinton’s files on the server equipment Platte 
River Networks stored in 2013 at the Equinix data center, Secaucus, NJ, for the period January 
21, 2009 to February I, 2013 for evidence relevant to your security inquiry. 


This letter also provides the Department of Justice with consent to search the 
back-up files of Datto Inc. for the current Platte River server for any file of former Secretary 
Clinton for the period January 21, 2009 to February 1, 2013 for evidence relevant to your 
security inquiry. 

I incorporate by reference the list of privilege trigger individuals set out in my 
letter to you dated October 1, 2015. 


We request and anticipate that at the conclusion of your inquiry you will return to 
us the former Secretary’s non-federal record, personal e-mails. 


Sincerely, 


David/B. Kendall 


DEK/csl 
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ALL ¥BI INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED 
DATE 12-05-2016 BY J76319T30 NSICG 


(WE) (FBI) bé 
From: CL Fro) (FBI) 


Sent: 
To: 


Subject: : 
Attachments: Letter t Consent pdf 


From: 
Sent: Thursday, October 01, 2015 12:11 PM 


To: Strzok, Peter P. (WF) (FBI); Moffa, Jonathan C. we (FBI) (RO) (FEL KOGC) (FET) 


Ce: (NSD) (MD); (USAVAE); (USAVAE) ; 
Subject: Correspondence from W&C bé per FBI, NSD 

b7C per FBI, NSD 
All: 


Attached is a letter that just came in from wac[ and I will still need to send a letter to Latham & Watkins and 
W&C memorializing the process to be used with server (in two stages, etc.). We are working on revising that and will 
circulate to the group. When we send drafts, please review as quickly as possible and get back to us, as we are trying to 
keep things moving. 


es 


b6 per NSD 
Counterintelligence and Export Control Section b7C per NSD 
National Security Division 
U.S. Department of Justice 
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LAW OFFICES 


WILLLAMS & CONNOLLY LLP 
2725 TWELFTH STREET, N.W. 


DAVID E KENDALL WASHINGTON, D. C. 20005-5901 EENARD BENNETT WILLIAMS (1820-1988) 
PAUL R. CONNOLLY (022-1078) 
(202) 434-5145 (202) 434-5000 
dkendall@we.com 


FAX (202) 434-5029 


October 1, 2015 


BY EMAIL AND FIRST CLASS MAIL 


United States Department of Justice b6 per NSD 
National Security Division b7C per NSD 
600 E Street, NW 


Washington, DC 20530 


Dea___] 


Pursuant to our recent conversations, this letter provides the Department of 
Justice with consent to search former Secretary Clinton's files on the current Platte River 
server for the period January 21, 2009 to February 1, 2013 for evidence relevant to your 
security inquiry. : 

We request and anticipate that at the conclusion of your inquiry you will return to 
us the former Secretary’s non-federal record, personal e-mails, 


Sincerely, 


Ie Eud/ 


David E. Kendall 
DEK/bb 
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ALL FRI INZCRMATION CONTAINED 
HEREIN IS UNCLASS. 
DATE 12-05-2014 BY J7€318T80 MSICG 


(WF) (FBI) 
bE 


From: [ }Ro) (Fe) BIC 


Sent: . 

To! we) (Fen }we 
Subject: 

Attachments: 2015.09.25 Letter from te e Privilege.pdf; ATTO0001.htm; 2015.09.25 


Letter from D. Kendall t e Consent. pdf, ATTOQ002.htm 


- -Original Message b6 per FBI, NSD 
Sent: Friday, September 25, 
To:[ SSCS (USAVAE) [7d (USAVAEL: (OGC) (FBI); Strzok 
Peter P. (WF) (FBI); Moffa, Jonathan C. (CD) (FBI) (RO) (FBI); 

Subject: Fwd: Letters from David Kendall 


Letters from W&C re: filter search terms and consent for blackberry back-ups. 


Begin forwarded message: 


From: “Turner, Katherine” <kKTurner@wc.com<mailto:KTurner@wc.com>> 
Date: 5 at 6:21:58 PM EDT 


b6 per NSD 
b7C per NSD 


| “Kendall, David" 


<DKendall@wc.com<mailto:DKendall@wc.com>> 


Subject: Letters from David Kendall 
Attached please find two letters from David Kendall. Thank you. 


Katherine Turner 

Williams & Connolly LLP 

725 Twelfth Street, N.W., Washington, DC 2e@@5 

(P) 202-434-5487 | (F) 202-434-5029 

kturner@wc.comemailto:kturner@wc.com> | www.wc.com/kturnerchttp://www.we. com/kturner> 


This message and any attachments are intended only for the addressee and may contain 
information that is privileged and confidential. If you have received this message in error, 
please do not read, use, copy, distribute, or disclose the contents of the message and any 
attachments. Instead, please delete the message and any attachments and notify the sender 
immediately. Thank you. 
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LAW OFFICES 


WILLIAMS 8 CONNOLLY LLP 
725 TWELFTH STREET, N.W 
WASHINGTON, D. C. 20005-5901 EDWARD BENNETT WILLIAMS (1020-1908) 


DAVID E. KENDALL PAUL R, CONNOLLY (922-1078) 


(202) 434-5145 (202) 434-5000 
dkendall@we.com 
FAX (202) 434-5029 


September 25, 2015 


BY E-MAIL 


Lee . b6 NsD 
7S. Department of Justice per 


: eee b7C per NSD 
National Security Division. 
905 Pennsylvania Avenue NW 
Washington, DC 20530 


bef] 


I write regarding the Department of Justice’s security inquiry in response to a referral 
from the Inspector General of the Intelligence Community. Pursuant to our conversation, I 
understand that your security inquiry may involve review of Secretary Clinton’s e-mails for 
evidence relevant to that inquiry. As discussed, her e-mails include materials covered by 
attorney-client, marital, or medical privileges. 1 provide the following list of individuals and 
entities with whom Secretary Clinton may have communicated in a privileged context. 


Attorneys 
b6 per NSD 
b7C per NSD 
avid Kendal liams. ‘onno) 


- Mills (in her capacity as personal counsel on prior matters) 


Katherine Tumer, Williams & Connolly LLP 


Doctors 


b6 per NSD 
b7C per NSD 
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WILLIAMS & CONNOLLY LLP 


b6 per NSD 


b7 
September 25, 2015 Cc per NSD 


Page 2 
Marital 
President William Jefferson Clinton 


Personal Aides to President Clinton/Conduits of Marital Communications 


b6 per NSD 
b7C per NSD 


Personal 


elatives 


b6 per NSD 
b7C per NSD 


Personal Financial Consultant 
b6 per NSD 
b7C per NSD 


We request and anticipate that at the conclusion of your inquiry you will return to us the 
former Secretary’s non-federal record, personal e-mails. 


Sincerely, 


Paid €- Fer Lek) 


David E, Kendall 
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LAW OFFICES 
WILLIAMS 8 CONNOLLY LLP 
725 TWELFTH STREET, N.W. 


DAVID E. KENDALL WASHINGTON, D. C. 20005-5901 AoUARD apne VuLIAMS 4m20-080) 
(202) 42475145, (202) 434-5000 
Awe. 
aoe al aia FAX (202) 434-5029 
September 25, 2015 
BY E-MAIL 


Les perot be per NS 
, Dep ent of Justice b7C per NSD 


National Security Division 
905 Pennsylvania Avenue NW 
Washington, DC 20530 


Dee] 


Pursuant to our conversation yesterday, this letter will provide the Department of Justice 
consent to search the back-up files of former Secretary Clinton’s e-mails for evidence relevant to 
your security inquiry involving those e-mails. 


We request and anticipate that at the conclusion of your inquiry you will return to us the 
former Secretary’s non-federal record, personal e-mails. 


Sincerely, 


Jud € fentt 


David E. Kendall 
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ALL FBI INFORMATION CONTAINED 
HEREIN I5 UNCLASSIFIED 
DATE 02-11-2018 BY Cé@W4éR11 NSICG 


( ‘ 
Vad 
FD-340 (Rev. 4-11-03) 


b3 
File Number b7E 


Field Office Acquiring Evidence _\AU FR. 


Serial # of Originating Document { vi 
Date Received t lo hi b 

y OF 
From 


(Name of Contributor/Intcrviewee) 


(Address) 
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ALL FBI INFORMATION CONTAINED 

HEREIN I5 WICLASSIFIED 

DATE 12-05-2016 BY J76318T20 NSICG 
UNCLASSIFIED/ /FOuS. ; 


U.S. Department of Justice 


Federal Bureau of Investigation 
Washington, D.C. 20535-0001 


Date: 4 January 2016 


b3 per CIA 
b6 per CIA 


Counterespionage Group b7C per CIA 


Counterintelligence Center CIA 


be 
ee es A bre 
Acting Section Chie 


Counterespionage Section 


Subject: Requests authority use CIA documents during interviews 


(U//FOOS) In July 2015, the FBI received a Section 811 referral 
from the Inspector General for the Intelligence Community (ICIG) 
regarding the possible compromise of classified national security 
information. The potential compromise was identified when, as part of 
a Freedom of Information Act (FOIA) request, the U.S. Department of 
State (DoS) and the ICIG reviewed electronic mail (email) 
communications from private email accounts previously used by a 
former Secretary of State during their tenure at DoS. 


(U//PE8e) At the request of the FBI, as well DoS and the ICIG, 
the CIA has since conducted classification reviews of emails and 
documents related to this matter that were deemed to contain CIA 
equities. 


(U//PO8S} Currently, the FBI plans to interview several 
individuals who originated, transmitted or received classified 
documents via an unclassified email system. During these interviews 
the FBI would like to show the interviewee, and if necessary their 
legal counsel, the relevant documents that they were a party to. 
Doing so will allow the FBI to pursue a logical line of questions 
regarding the circumstances in which the classified information was 
sent. 


UNCLASSIFIED/ -seue- 


This document contains neither recommendations nor conclusions of the FBI. It is 
the property of the FBI and is loaned to your agency; it and its contents are not 
to be distributed outside your agency 


HRC-2793 


UNCLASSIFIED/ /Ee80 


(U//P@86) More specifically, the FBI currently plans to 
interviep and his legal counsel from Paul, Weiss, b6 
Rifkind, Wharton & Garrison LLP, about an email that he authored on pic 
March 21, 2009 and sent from his personal email account to the former 
Secretary of State. During a recent classification review the CIA 
deemed that the email was classified at the time that it was sent, 


but is now considered UNCLASS/CIAIOU. 

(U//$Q80) The FBI also anticipates th it may be necessary to 
interview regarding this matter vee 
as he is directly referenced in the email by name. 


(U//#e88) As such, the FBI respectfully requests Central 


Intelligence Agency (CIA) authority to show the attached document to 
[J ana their respective legal counsel bs 


during future interviews regarding this matter. 


(U//PO8@)_Please direct all inquiries regarding this request to 
Special Agent vee 


Si rely, 


Acting Section Chief 
Counterespionage Section 


rere) 


UNCLASSIFIED / /Eoue 


This document contains neither recommendations nor conclusions of the FBI. It is 
the property of the FBI and is loaned to your agency; it and its contents are not 
to be distributed outside your ,agency 
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01/07/2016 4:39PM FAX 0001/0015 


Jan 7, 2086 U.S. Department of State Pay Perlod: 26 
11:21 AM Report of Historical Data Dee. 27, 2015~ Jan. 9, 2016 


| Pay Period 9 of 2009 - Pay Period 2 of 2013 b6 


Name: PAGLIANO, BRYAN M ssNL___ Org Cade: 183000 


Code Sun Mon Tue Wed Thr Fri Sat Sun Mon Tue Wed Thr Fri Sat Total 
Pay Period 2 of 2013 


Original TA delivered in PP: 2/2013 
be 


Pay Period 1 of 2013 


Original TA delivered in PP: 1/2013 
b6é 


Pay Period 27 of 2012 
igh ivered it 27/20 


b6 


Pay Portod 26 of 2012 


Original 


b6 


Pay Period 25 of 2012 


ca ea b6 


Pay Period 24 of 2012 
Original 1A delivered in PP; 24/2012. 


b6é 


Pay Pertod 23 of 2012 
Original TA delivered in PP; 23/2012 


eee e ee on 
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per 


per 


per 


per 


per 


per 


per 


per 


HRC-2800 


BOS 


DOS 


DOS 


DOS 


DOS 


DOS 


DOS 


DOS 


01/07/2016 4:39PM FAX 


0002/0015 


Jan 7, 2016 U.S. Department of State Pay Period: 26 
11:21, Report of Historical Data Dee. 27, 2015 - Jan. 9, 2016 
Users Pay Period 9 of 2009 - Pay Period 2 of 2013 Sper: 
Name: PAGLIANO, BRYAN M ci | Ore Code: 183000 Continued, 
Code Sou Mon ‘we Wed Thr Fri Sat Sun__Mon Tuc Wed Thr Pri Sat_Total 
b6 per 
Pay Period 22 of 2012 
Original TA delivered in PP: 22/2012 
b6 per 
Remarks; FEDERAL OFFICES ARE CLOSED 10 THR PUBLIC 
Pay Period 21 of 2012 
Original TA delivered in PP: 21/2012 
b6 per 
Pay Period 20 of 2012 
Original TA delivered in PP: 20/2012 . 
b6 per 
Pay Perlod 19 of 2012 
Corrected TA delivered in PP: 20/2012 
b6 per 


Original TA delivered in PP; 19/2012 
b6 


Pay Period 18 of 2012 
Original TA delivered in PP: 18/2012 


bé 
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per 


HRC-2801 


DOS 


Bos 


DOS 


bBOS 


DOS 


DOS 


BOS 


DOS 


01/07/2015 4:38PM FAX 


Jan 7, 2016 


h:21 
User; 


U.S. Department of State 
Report of Historical Data 


0003/0015 


Pay Period: 26 


Dec. 27, 2015 = Fan. 9, 2016 


Pay Period 9 of 2009 - Pay Period 2 of 2013 b6 
Name, PAGUIANO, BRYAN a i Org Cade; 183000 Contined. 
Code Sun_ Mon Twe Wed Thr Fri Sat Sun Mon Tue Wed The Fri Sut Total 
bé 
Pay Period 17 of 2042 


Original TA delivered in PP: 17/2012 : 
be 


Pay Period 16 of 2012 


Original TA delivered in PP: 16/2012 
b6é 


Pay Period 15 of 2012 


Original TA delivered in PP; 15/2012 
be 


Pay Period 14 of 2012 
Original Ta delivered in PP: 14/2012 


Pay Period 13 of 2012 


b6é 


Original TA delivered in PP; 13/2012 = 
b6é 


Pay Period 12 of 2012 


ee TA delivered in PP; 1 = 
be 


Pay Period 11 of 2012 
Original TA detivered in PP: 11/2012 


Pay Period 10 of 2012 
Original TA delivered in PP; 10/2012 


b6é 
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per 


per 


per 


per 


per 


per 


per 
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Bos 


BOS 


Bos 


DOs 


Bos 


Bos 


BOS 


Bos 


01/07/2016 4:39PM FAX (yo004/0015 


Jan 7, 2016 U.S. Department of State Pay Period: 26 
14:21 Report of Historleal Data Dee, 27, 2015 = Jan, 9, 2016 
User: Pay Period 9 of 2009 - Pay Period 2 of 2013 b6 Per 


Name: PAGLIANO, BRYAN M SS a ‘Org Code: "185000 ‘Continued, 


CY me eee 


Pay Period 9 of 2012 


Original TA delivered in PP: 42 
b6 Per 


Pay Period 8 of 2012 


Original TA delivered in PP: 8/2012 
b6 Per 


Pay Period 7 of 2012 


Original TA delivered in PP: 7/2012 


” Pay Period 6 of 2012 


Original TA delivered in PP: 6/2012 : 
TOY pe ee 


Pay Period 5 of 2012 . 


Original TA delivered in PP: 5/201. 


Pay Period 4 of 2012 
Original TA delivered in PP: 4/2012 


b6 Per 
Pay Period 3 of 2012 
Original TA delivered in PP: 3/2012 
Pay Period 2 of 2012 


Original TA delivered in PP: 2/2012 
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DOS. 


DOS. 


Bos. 


Bos. 


Bos. 


Bos. 


DOS. 


Bos. 


01/07/2016 4:39PM FAX 0005/0015 


Jan 7, 2016 U.S. Department of State Pay Period: 26 
11:21, Report of Historical Data Dec. 27, 2014 - Jan. 9, 2016, 
User, Pay Period 9 of 2009 - Pay Period 2 of 2013 b6 Per Dos 


Name: PAGLIANO, BRYAN M cS a | Org Code: 183000 Continued. 


Code a Eri Sun Mon Toe Wed Thr Fri Sat Total 


Pay Period 1 of 2012 
Original TA deliver 


b6 Per DOS 
Pay Perlod 26 of 2011 
Original TA delivered in PP: 26/2011 
b6 Per DOS 
Pay Period 25 of 2011 
Original TA delivered in PP: 25/2011 
b6 Per DOS 
Pay Period 24 of 2011 
Original TA delivered in PP: 24/2011 
b6 Per DOS 
Pay Perlod 23 of 2011 
Original TA delivered in PP: 23/2011 
b6 Per DOS 


Pay Period 22 off 2011 
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01/07/2018 4:39PK FAX 0006/0015 


Jan 7, 2016 U.S. Department of State Pay Period: 26 
11:21AM. Report of Historical Data Dec. 27, 2015 - Jan, 9, 2016 
User Pay Period 9 of 2009 - Pay Period 2 of 2013 b6 Per DOS 
Name, PAGLIANO, BRYAN cs: a | Org Code!” 185000 Coated 
Code Sun Mon Tue Wed Thr Fri Sat Son Vion Tue Wed The Fri Sat Total 
Original TA delivered In PP: 22/2011 
Pay Period 21 of 2012 


Original TA detivered in PP: 21/2011 


Per DOS 
Pay Period 20 of 2011 
Original TA delivered in PP: 20/2011 
Pay Period 19 of 2011 
Iris TA delivered in PP: 19/201] 
Per DOS 
Pay Period 18 of 2011 
Original TA delivered in PP: 18/2011 
Per DOS 
Pay Period 17 of 2011 
b6 Per DOS 
Pay Period 16 of 2011 
Original TA delivered in PP: 16/2011 
b6 Per DOS 
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01/07/2018 4:39PM FAX (0007/0015 


Jan 7, 2016 : U.S. Department of State Pay Period: 26 
11:2; Report of Historical Data Dec, 27, 2015 - Jan. 9, 2016 
Uses Pay Period 9 of 2009 - Pay Period 2 of 2013 b6 Per DOS 
Name: PAGLIANO, BRYAN M a | Ore Code: 183000 Continued. 
Code Sus Mon Tue Wed Thr Fri Sat Suo Mon Tuc Wed The Fri Sat Total 


Pay Period 15 of 2011 


Pay Period 14 of 2011 
Original TA delivered in PP: 14/2011 


Per DOS 
Pay Period 13 of 2011 
Original TA delivered in PP: 13/201] 
Pay Period 12 of 2011 
Original TA detivered in PP: 12/2011 
b6 Per DOS 
Pay Period 11 of 2011 
Original TA delivered tn PP: 112011 
b6 Per DOS 
Pay Period 10 of 2012 
Original TA delivered in PP: 10/2011 
b6 Per DOS 
Pay Period 9 of 2011 


Original TA delivered in PP: 9/2011 
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01/07/2018 4:39PM FAX (0008/0015 


Jan 7, 2016 U.S, Department of State Tay Ferlod: 26 


11:21 Report of Historical Data Dee, 27, 2015 - Jan. 9, 2016 
Usery Pay Period 9 of 2009 - Pay Period 2 of 2013 b6 Per Dos 
Name: PAGLIANO, BRYAN M cc: a | Org Code: 183000 ‘Continued. 
Code Sun Mon Tue Wed Thr Fri Sat Sun Mon Tue Wed Thr Fri ‘Sat__Total 
Pay Period 8 of 2011 


Original TA delivered in PP; 8/20t1 


b6 Per DOS 
Pay Period 7 of 2011 
Original TA delivered in PP; 7/2011 
Pay Period 6 of 2011 
Original TA delivered in PP: 6/2017 
b6 Per DOS 
Pay Period § of 2011 
Original TA delivered in PP: 5/2017 . 
b6 Per DOS 
Pay Perlod 4 of 2011 
Original TA delivered in PP; 4/2011 
b6 Per DOS 
Pay Period 3 of 2011 
igi deli in PP: 3/201, 
b6 Per DOS 
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01/07/2016 4:40PM FAX 


0008/0018 


Jan 7, 2016 US artment of State Pay Period: 26 
41:21 AM. Re>-™ of Historleal Data Dec. 27, 2015 = Jan. 9, 2016 
User{S=*«dt:C*s«éP ay Period’ 9 of 2009 - Pay Period 2 of 2013 b6 Per 
Name: PAGLIANO, BRYAN M $5] ‘Org Code: 183000 ‘Continued. 
Code Sua Man Tue Wed Thr Fri Sat Sun Mon Tue Wed Thr Fri Sat Total 
b6 Per 
Pay Period 2 of 2011 
Original TA delivered in PP: 2/2011 
b6 Per 


Pay Period 1 of 2011 


Original TA delivered in PP: 1/2011 


Pay Period 26 of 2010 
Original TA delivered in PP: 26/2010 


Pay Period 25 of 2010 
Original TA delivered in PP: 25/2010 


Pay Period 24 of 2010 


Pay Period 23 of 2010 
Original TA delivered in PP: 23/2010 


b6 Per 


b6 Per 


b6 Per 


b6 Per 
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Bos. 


Bos. 


Bos. 


DOS. 


Bos. 


Bos 


BOS 


91/07/2016 4:40PM FAX 0010/0015 


Jan 7, 2016 : U.S. Department of State Pay Period: 26 
11:2; Report of Historical Data . Dec, 27, 20015 - Jan, 9, 2016 
User Pay Period 9 of 2009 - Pay Period 2 of 2013 b6 Per DOS 
‘Name: FAGLIANO, BRYANM cS | Org Code: 183000 Continued, 
Cade Suo__Mou Tue __Wed_ Thr _Fri__Sat__—'Sun_ Mon Tue _Wed_ Thr __Fri__‘Sat_Total 
b6 Per DOS 
Pay Period 22 of 2010 
Original TA delivered in PP: 22/2010 
Pay Period 21 of 2010 . : 
Original TA delivered in PP: 21/2010 
b6 Per DOS 
Pay Period 20 of 2010 
Original TA delivered in PP: 20/2010 
b6 Per DOS 


Pay Period 19 of 2010 


Original TA delivered in PP: 19/2010 
[_™~—“CTCSCSC“‘CSSC#“*#d; me pees 


Pay Period 18 of 2010 
Original TA delivered in PP; 18/2010. 


Per DOS 


Per DOS 


Pay Perlod 16 of 2020 
Oviginal TA delivered in PP: 16/2010 
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01/07/2016 4:40PM FAX 0011/0015 


San 7, 2016 ; U.S. Department of State Pay Period: 26 
11:21 AM Report of Historical Data Dec. 27, 2015 - Jan. 9, 2016 
Uef_S=*«dYS~CSCs«éaty Period 9 of 2009- Pay Period 2 of 2013 6 


Name: PAGLIANO, BRYAN M | Gig Cade 183000 Contned, 


Code Sun Mon Tue Wed Thr Fri Sat__ San Mon Tuo Wed Thr Fri Sat Total 
bE 
Pay Period 15 of 2010 
et TA delivered in PP: 1 df 
bE 
Pay Period 14 of 2010 
Orivinal TA delivered in PP; 14/2010 
bE 


Pay Period 13 of 2019 
Original TA delivered in PP: 13/2010 


Pay Perfod 12 of 2030 


Original TA delivered in PP: 12/2010 
b6 


Pay Period IL of 2010 
Original TA delivered in PP. 11/2010 


b6 
Pay Perlod 10 of 2010 . 
CC - 
Pay Period 9 of 2010 


™ TA delivered in PP; 9/2010 
bE 
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Per 


Per 


Per 


Per 


Per 


Per 


Per 


Per 
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DOS. 


Bos 


Bos 


Bos 


Bos. 


Bos. 


Bos. 


Bos. 


Bos 


O1/OT/201B 4:40PM FAX 


Jan 7, 2016 


U.S. Department of State 
11:21 AM. Report of Historical Data 


0012/0015 


Pay Pertod: 26 


Dee. 27, 2015 ~ Jan. 9, 2016 


use| «d|~SSséPay Period 9 of 2009- Pay Period 2 uf 2013 b6 Per 
Name: PAGLIANO, BRYAN M 5 a | Org Code: 183000 Continued. 
Cade Sun Mon Tue Wed Thr Fri Sat Sun Mon Tue Wed Thr . Fri Sat_ Total 
b6 Per 
Pay Period 8 of 2010 


Pay Period 7 of 2010 
Original TA delivered in PP: 7/2010 


Pay Period 6 of 2010 
Original TA delivered in PP: 6/2010 


Pay Period 5 of 2010 
Original TA delivered in PP: 5/2010 


Pay Period 4 of 2010 
Original TA delivered in PP; 4/2010 


Pay Period 3 of 2010 


Original TA delivered in PP: 3/2010 
[OOCOCOCOCSCSC*‘*dY “ee 


Pay Period 2 of 2010 
Original TA delivered in PP: 2/2010 


b6 Per 


b6 Per 


b6 Per 


b6 Per 


b6 Per 
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DOS. 


Bos. 


BOS. 


DOS. 


Bos 


BOS. 


Bos. 


DOS. 


DOS. 


01/07/2016 4:40PM FAX 


Jan 7, 2016 U.S. Department of State 
Report of Historical Data 


11:21 ; 
oe Pay Period 9 of 2009 ~ Pay Period 2 of 2013 


0013/0018 


Pay Period: 26 


Dec. 27, 2015 - Jan. 9, 2016 


b6 Per 


Name: PAGLIANO, BRYAN M. 


——_ 


Org Code: 183000 


Continued. 


Sun__Mon Tue Wed Tar Fred Sat Sun Mon Tue Wed Thr Fri Sat Total 
b6 Per 


Pay Period 1 of 2010 


inal TA delivered in PP: 1/2010 
b6 Per 


Pay Period 26 of 2009 
iginal TA delivered in PP: 26/2009 


Pay Period 25 of 2009 


Per 


igingl 1'A delivered in PP: 25/2009 


Pay Pertod 24 of 2009 
Original TA delivered in PP: 24/2009 


Pay Period 23 of 2009 
Original TA delivered in PP: 23/2009 


Pay Period 22 of 2009 


Original TA delivered in PP: 22/2009 


Pay Period 21 of 2009 
Original TA delivered in PP: 21/2009 


‘ 


Per 


b6 Per 
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DOS. 


Bos. 


DOS. 


DOS. 


Bos. 


BOS 


DOS. 


BOS. 


01/07/2016 4:40PM FAX 


Jan 7, 2016 U.S. Department of State 


0014/0015 


Pay Period: 26 


11:2) Report af Historical Data Dec. 27, 2015 - Jan. 9, 2016 
User Pay Pertad 9 of 2009 - Pay Pertod 2 of 2013 b6 Per 
Name: PAGLIANG, BRYAN M a | Ore Coder 183000 Continued. 
Code Sun Mon Tue Wed Thr Fri Sat Sun = Mon Tue Wed Thr Fri Sat__ Total 
b6 Per 
Pay Period 20 of 2009 


Original TA delivered in PP: 20/2009. 


Pay Period 19 of 2009 


Original TA delivered in PP: 19/2009 


Pay Period 18 of 2009 
viginal TA delivered in PP: 18/2009 


Pay Period 17 of 2009 


Original TA delivered in PP: 17/2009 


Pay Period 16 of 2009 


Cd me gee 


Pay Period 15 of 2009 
igis i i »: 15/2009 


Pay Period 14 of 2009 
Original TA delivered in PP: 14/2009 


Per 


ib6 Per 


b6 Per 


Page 14 of 15 


HRC-2813 


DOS. 


Bos. 


BOS 


BOS 


BOS. 


Bos. 


Bos. 


Bos. 


01/07/2015 4:40PM FAX oo15/0015 


Jan 7, 2016 U.S, Department of State , Pay Period: 26 


11:2) Report of Historical Data Dec. 27, 2015 - Jan. 9, 2016 
User Pay Period 9 of 2009 - Pay Period 2 of 2013 . b6 Per DOS 
Name: PAGLIANO, BRYAN M cs | ‘Org Code: 183000 ‘Continued. 
Code Sun Mon Tue Wed Thr Fro Sat Sun Mon Tue Wed Thr Fri Sat Tata 
b6 Per DOS 
Pay Period 13 of 2009 
Orivinal TA delivered in PP: 13/2009 
b6 Per DOS 
Pay Period 12 of 2009 
Original TA delivered in PP: 12/2009 
“b6 Per DOS 


Pay Period 11 of 2009 
i delivered in PP: 11/2009 


Per DOS 


#** END OF REPORT *** 
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Serial # of Originating Document Ho 
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From ex Arte TOO of Ses 


(Name of Contribuior/interviewee) 


(Adress) 


«City and State) 


b6 
By b7Cc 


To Be Retumed [1] Yes A No 


ReceiptGiven (1 Yes EY No 
Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 


1 Yes EYNeo 
Federal Taxpayer Information (FTI) 


QO Yes -EtKio 
MISA KAW. 


Reference: 


(Communication Enclosing Material) 


Description: a Original notes re interview of 


nitiA Te (OS ese Atty. 


LAY 


HRC-2815 


ALL FEI INFORMATION CONTAINED 
BEREIM IS UNCLASSIFIED 
CATE 12-05-2016 BY 3 


18780 NWSICC 


UNCLASSIFIED/ Apeyo 


U.S. Department of Justice 


Federal Bureau of Investigation 
Washington, D.C. 20535-0001 


Date: 12 February 2016 


To: Gregory B. Starr 
Assistant Secretary 
Bureau of Diplomatic Security 


From: Peter Strzo 
Section Chie 
Counterespionage Section 


Subject: Requests authority use confidential and classified DoS 
documents during interviews 


(U//FOUQ) In July 2015, the FBI received a Section 811 referral 
from the Inspector General for the Intelligence Community (ICIG) 
regarding the possible compromise of classified national security 
information. 


(U//F686) The potential compromise was identified when, as part 
of a Freedom of Information Act (FOIA) request, the U.S. Department 
of State (DoS) and the ICIG reviewed electronic mail (email) 
communications from private email accounts previously used by a 
former Secretary of State during her tenure at DoS. An initial review 
of this material identified emails containing national security 
information later determined by the US Intelligence Community (USIC) 
to be classified up to the Top Secret/Sensitive Compartmented 
Information level. 


(U//Peua) Currently the FBI plans to interview several 
individuals who originated, transmitted or received classified emails 
or documents via an unclassified email system. During these 
interviews the FBI would like to show the interviewees, and if 
necessary their legal counsel, the relevant documents to which they 
were a party. Doing so will allow the FBI to pursue a logical line of 
questions regarding the circumstances in which the classified 
information was sent. 


UNCLASSIFIED//Fe@UO 


~it and its contents are not 


RC-2816 


UNCLASSIFIED//Feve. 


(U//Fe8e) As such, the FBI respectfully requests DoS authority 
to show DoS emails and documents, as provided to the FBI during the 
course of this investigation, to those individuals that were involved 
in, or knowledgeable of, the respective email chains. Given the 
amount of time that has elapsed since the emails were sent, the FBI 
believes that it is necessary to show the actual email and any 
attachments to the interviewees in order to have a meaningful 
discussion regarding the context in which the email was sent. 


(U/ Pee) Due to the evolving nature of this matter, it is not 
currently possible to identify all of the specific documents which 
may be relevant to future interviews. Furthermore, the often quick 
turnaround time between identifying and interviewing relevant parties 
makes it infeasible to request DoS approval for each specific 
document prior to a given interview. Therefore, blanket approval is 
requested to show any of the confidential or classified DoS emails or 
documents, as provided to the FBI in the course of this matter, to 
future interviewees as deemed necessary. 


(U//PO86) For each DoS email or document to be used during an 
interview, the FBI will only show the email or document to those 
individuals, and their legal counsel, necessary to further the 
investigation. Additionally, standard safeguarding procedures will be 
used to ensure the protection of the content and to prevent any 
unnecessary disclosures. 


(U/ Pl i i iri ing this request to 
Special Agent reo 


Sincerel 


Peter Str’ 
Section Chief 
Counterespionage Section 


+ 


UNCLASSIFIED/ /Peve- 


This document contains neither recommendations nor conclusions of the FBI. It is 
the property of the FBI and is loaned to your agency; it and its contents are not 
to be distributed outside your agency. 
, HRC-2817 


ALL FRI INFORMATION CONTAINED 
BEREIN IS UNCLASSIFIED 
DATE 05-2016 BY J76218TSO WSICC 


bé 
WF) (FBI b7c 


From 

Sem b6 per DOS 
Subject: DoS LHM dated 02/12/2016 --- UNCLASSIFIED/FEU@- BIC per: DOS 
Attachments: DOS LHM 12FEB16.pdf 

SentinelCaseld: TRANSITORY RECORD 


Classification: UNCLASSIFIED//FoUC- 


TRANSITORY RECORD 


‘: b6 per DOS 
| b7C per DOS 
Please find an LHM attached requesting DoS approval to use DoS emails in upcoming interviews, 


We would like to expedite this request if possible. We are happy to meet in person next week 
if this matter needs to be discussed further. 


Thank you and have a nice weekend. we 


b7C 


Classification: UNCLASSIFIED//Fouu 
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ALL ERI INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED 
DATE 12-05-2014 BY 


UNCLASSIFIED/ /FOUe- 


U.S. Department of Justice 


Federal Bureau of Investigation 
Washington, D.C. 20535-0001 


Date: February 24, 2016 


€I18TeO NSICG 


. b3 per CIA 
| Bo per cm 


-Counterespionage Group b7C per CIA 


Counterintelligence Center CIA 


From: Peter P. Strzok 
Section Chief 
Counterespionage Section 


Subject: Request for Interview 


The FBI Washington Field Office (WFO) respectfully requests the 
CIA’s assistance in contacting former CIA Deputy Director Michael J. 
Morell in regards to a request for an FBI interview. It should be 
expressed said interview is voluntary and pertains to a sensitive 
matter in which the FBI believes Mr. Morell may be of assistance. 


If you have any questions_regarding this request lease direct 


Peter P. 
Section Chie 
Counterespionage Section 


of 


UNCLASSIFIED//#Peue- 


This document contains neither recommendations nor conclusions of the FBI. It is 
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to be distributed outside your agency 
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ALL FBI INFORMATION CONTAINED 
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UNCLASSIFIED/ /Feve 

U.S. Department of Justice 
Federal Bureau of Investigation 
Washington, D.C. 20535-0001 
Date: 23 February 2016 

: b3 per CIA 
To: - b6 per CIA 

Counterespionage Group b7C per CIA 


Counterintelligence Center CIA 


From: Peter Strzok uv 


Section Chief 
Counterespionage Section 


Subject: Provides notice that the FBI plans to use documents 
possibly containing classified CIA equities in upcoming interviews 


(U/APOUO) In July 2015, the FBI received a Section 811 referral 
from the Inspector General for the Intelligence Community (ICIG) 
regarding the possible compromise of classified national security 
information. The potential compromise was identified when, as part of 
a Freedom of Information Act (FOIA) request, the U.S. Department of 
State (DoS) and the ICIG reviewed electronic mail (email) 
communications from private email accounts previously used by a 
former Secretary of State during her tenure at DoS. 


(U//FO8e) At the request of the FBI, as well as DoS and the ICIG, 

the CIA has conducted classification reviews of an initial set of 

emails related to this matter that were deemed to contain CIA 

equities. On January 5, 2016, the FBI requested CIA authority to use 

Do dsc fic emails containing CIA equities in bl per CIA 

upcoming interviews of individuals that were a party to the specific >? Per C™ 

emails. ay 
etter to the FBI dated “ 

anuary 21, , the CIA provided formal approval for the FBI to use 
the cited emails in interviews with the following stipulations: 


e FBI must verify that the witness/counsel: 
o had the appropriate clearance contemporaneously with 
the sending/receipt of the email at issue; 


UNCLASSIFIED//FOue 
This document contains neither recommendations nor conclusions of the FBI. It is 


the property of the FBI and is loaned to your agency; it and its contents are not 
to be distributed outside your agency 
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UNCLASSIFIED / /Toue- 


o currently has the appropriate clearance when 
interviewed by the FBI; or 

o signs a Non-disclosure agreement at the time of the 
interview prior to being shown properly labeled CIA 
classified information. 


(U//FO88} The FBI has continued to identify and review emails 
relevant to the referenced investigation since submitting the use 
authority request to the CIA in January. At this time, the FBI has 
identified additional emails that may contain CIA equities, which 
range in classification levels from SECRET//NF to TOP SECRET//CODE 
WORD. This assessment is based on the fact that the newly identified 
emails contain subject matter that is similar to that of the 
previously classified emails, although there has not yet been a 
formal classification determination on the newly identified emails 


(U/APS8E) These newly identified emails have been deemed 
critical to upcoming interviews regarding the réferenced 
investigation. Given the amount of time that has elapsed since these 
emails were first sent, the FBI believes that it is necessary to show 
the actual emails to the interviewees in order to have a meaningful 
discussion regarding the context in which the email was sent. While 
the FBI plans to formally submit these newly identified emails to the 
CIA for formal OCA review, time constraints make it infeasible to do 
such prior to the upcoming interviews. Therefore, the FBI plans to 
use the newly identified emails as necessary while adhering to the 
use stipulations provided in the CIA memorandum dated January 21, 
2016. 


(U//Fe8e i i iri ding this request to 66 
Special Agent pre 


Peter Str 
Section Chief 
Counterespionage Section 


o 
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'b6 Per 
b7C DOS 


From: 

Sent: Wednesday, October 14, 2015 5:02 PM 
To: 

Subject: Name Checks 


b7c DOS 


A search of the DS/DO/OSI IMS (classified) system resulted in hits on the following two individuals only. 


Lo} PR-2007-03802 (previously migrated into IMS from a former database, so there is limited information} 
This data is an export from PRTS = 


PRTS CASE: 


b6 Per 
Case Number: 11148 b7c DOS 


Case Name: 
Case Type: MISCELLANEOUS (MISC) 


Case Category: MISCELLANEOUS 
DS Case Number: 01-MC10-122003-263-0220 
Agency: US DEPARTMENT OF STATE 


Open Date: 14-NOV-03 
Close Date: 08-DEC-03 


Case Comment] b6é Per 
b7C DOS 


Current Country: KAZAKHSTAN 
Reported Date: 08-DEC-03 
User Last Update: DTG 

Date Last Update: 08-DEC-0 
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bl Per FBI 
b3 Per FBI 
b6 Per DOS 
b7c Per DOS 
bIE Per FBI 


Somsith 
This email is UNCLASSIFIED. 


ou roma de 
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a b6 Per FBI, DOS 


b7C Per FBI, DOS 


From: ease 
Sent: Thursday, October 15, 2015 7:33 AM 


Subject: FW: Warning Banners Pie. 


Especially the highlighted portions: 


This email is UNCLASSIFIED. 


b6 Per 


From: 
Sent: Wedn Ober 14, 2015 5:20 PM BIG. POS 
To: 


Subject: RE: Warning Banners 
The Logon Banner wording is specified in the Department’s Operating System Configuration Guides. The official guides 
are published by DS/SI/CS. The configuration guides are located 


at: https://intranet.ds.state.sbu/DS/SI/CS/ESS/SCM/SCM%20Final%20Documents/Forms/Allitems.aspx. The newer 
guides are in XML format. All systems are required to have the logon banner settings. 


If post or site is using Windows 7 on the workstation, look in the Win configuration document item 100 and 101. The 
Win 7 configuration document is at: https://cs.ds.state.gov/Sharepoint/config/FINAL%20-%20Win7_v2_1-xecdf.xml 
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Interactive logon: 
100 CCE-8973-0 Message text for users 
attempting to logon 


Interactive logon: 
101 CCE-8740-3 Message title for users 
attempting to logon 


You are accessing a U.S. Government information system, which 


_ includes (1) this computer, (2) this computer network, (3) all 


computers connected to this network, and (4} all devices and storage 
media attached to this network or to a computer on this network. Tt 
information system is provided for U.S. Government-authorized use 
only., Unauthorized or improper use of this system may result in 
disciplinary action, as well as civil and criminal penalties., By using th 
information system, you understand and consent te the following. Yi 
have no reasonable expectation of privacy regarding 
any,communications or data transiting or stored on this information 
system. At,any time, and for any lawful government purpose, the 
government may,monitor, intercept, and search and seize any 
communication or data transiting,or stored on this information 
system. Any communications or data transiting or stored on this 
information system may,be disclosed or used for any lawful 
government purpose., Nothing herein consents to the search or 
seizure of a privately-owned computer or other privately owned 
communications device, or the contents thereof, that is in the syster 
user's home. 


Warning: For Official Use Only! 


The following FAM/FAH policies identify the requirement and also states the banner info. 


12 FAM 642.4-3 
12 FAH-10 H-112.7-1 


Note that there may some deviation between the FAM and FAH specified wording. This could be a result of when the 
policy was written and the legal input to the banner since 2008. You can reach out to CS for a more definitive answer. 
The configuration guide uses the banner published in the 12 FAH and is actually associated with a Federal 
policy/standard NIST SP 800-53 Security Control — Access Control 8. 


If you have a government owned blackberry, you can take a picture of the OpenNet logon screen and send it to your 
OpenNet email for documenting the logon also. If you require more information, please let me know. 


DS Isso 

CGB Branch Chief 
DS/CTO/CGB 
Office 

Fax: (571) 345-2092 


bé Per 
b7¢ DOS 


Tell us how we are doing! If you would like io provide feedback regarding your level of satisfaction with the 
service DS/CTO has provided, please submit a statement to CTO's Feedback System. 


This email is UNCLASSIFIED. 
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12 FAM 642.4-3 Pre-Logon Warning Message 
(CT:DS-136; 07-16-2008) 


System managers must ensure that users attempting to access a 
Department computer system or network are presented with a pre-logon 
warning message. The following warning message must be used: 


“You are about to enter a Department of State computer system or 
network. Use by unauthorized persons, or for unauthorized personal 
business, is prohibited and may constitute a violation of 18 U.S.C. 1030 and 
other Federal law, as well as applicable Department policies and procedures. 


You have NO REASONABLE EXPECTATION OF PRIVACY while using this 
computer system or network. All data contained and/or activities performed 
herein may be monitored, intercepted, recorded, read, copied, or captured in 
any manner by authorized personnel. System management personnel or 
supervisors may give law enforcement officials or appropriate Department 
managers any potential evidence of crime, fraud, or employee misconduct 
found on this computer system or network, and employees may be subject 
to discipline for misuse. Furthermore, law enforcement officials may be 
authorized to access and collect evidence from this computer system or 
network, or from any portable devices that have been connected to this 
computer system or network, therefore: 


USE OF THIS COMPUTER SYSTEM OR NETWORK BY ANY USER, AUTHORIZED 
OR UNAUTHORIZED, CONSTITUTES EXPRESS CONSENT TO THIS 
MONITORING. 


IF YOU DO NOT CONSENT TO THIS MONITORING, OR IF YOU ARE NOT AN 
AUTHORIZED USER, PRESS CTRL/ALT/DELETE SIMULTANEOUSLY AND EXIT 
THIS SYSTEM. 


IF YOU ARE AN AUTHORIZED USER AND CONSENT, PRESS OK {or RETURN, or ENTER) TO INDICATE YOU 
AGREE TO ALL THE CONDITIONS STATED HEREIN.” 
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12 FAH-10 H-112.7-1 System Use Notification - 
Management Responsibilities 


(CT:DS-002; 09-19-2014) 


a. The IT CCB must ensure that approved operating systems have the capability to display a system use 


notification banner prior to granting users access to the information systems [L,M,H]. 


b. DS/SI/CS must ensure that DS Security Configuration guides configure the information systems to 
IL.M,H]: 


(1) Display to users the below pre-logon warning message before 
granting access to the information systems: 


You are accessing a U.S. Government information system, which includes 
(i) this information system; (ii) this information system‘s network; (iti) all 
information systems connected to this network; and (iv) all devices and 
storage media attached to this network or to information systems on this 
network. This information system is provided for U. S. Government- 
authorized use only. 

Unauthorized or improper use of this system may result in disciplinary 
action, as well as civil and criminal penalties. 

By using this information system, you understand and consent to the 
following: 


You have no reasonable expectation of privacy regarding any 


any time, and for any lawful government purpose, the government may 
monitor, intercept, and search and seize any communication or data 
transiting or stored on this information system. 


may be disclosed or used for any lawful government purpose. 

Nothing herein consents to the search or seizure of a privately-owned 
information system or other privately owned communications devices, or 
the contents thereof that is in the system user’s home. 


click button: "I AGREE") 


communications or data transiting or stored on this information system. At 


Any communications or data transiting or stored on this information system 


(2) Retain the pre-logon warning message on the screen until the user 
acknowledges the usage conditions and takes explicit actions to log 


on to or further access the information system (e.g., clicks the “I 
AGREE” button). 


c. Application owners of systems accessible by the general public that require access via logon 
interfaces must [L,M,H]: 
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(1) Display to users a system use information banner before granting 
further access, see banner example in 12 FAH-10 H-112.7-1b(1)}; 


(2) Display to users references, if any, to monitoring, recording, or 
auditing consistent with privacy accommodations for such systems 
that generally prohibit those activities; and 


(3) Include in the notice given to public users, a description of authorized 
uses of the system. 


12 FAH-10 H-112.7-2 System Use Notification - User 
Responsibilities 
(CT:DS-002; 09-19-2014) . 


Before logging on, the user must acknowledge reading the pre-logon 
warning message and agree to the conditions stated by pressing "I AGREE” 
[L,M,H]. 
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12 FAH-10 H-112.7 System Use Notification (AC-8) 


12 FAH-10 H-112.7-1 System Use Notification - 
Management Responsibilities 
(CT:DS-002; 09-19-2014) 


a. The IT CCB must ensure that approved operating systems have the capability to display a system use 
notification banner prior to granting users access to the information systems [L,M,H]. 


b. DS/SI/CS must ensure that DS Security Configuration guides configure the information systems to 
[L,M,H]: 


(1) Display to users the below pre-logon warning message before 
granting access to the information systems: 


You are accessing a U.S. Government information system, which includes 
(i) this information system; (ii) this information system’s network; (iii) all 
information systems connected to this network; and (iv) all devices and 
storage media attached to this network or to information systems on this 
network. This information system is provided for U. S. Government- 
authorized use only. 

Unauthorized or improper use of this system may result in disciplinary 
action, as well as civil and criminal penalties. 

By using this information system, you understand and consent to the 
following: 


You have no reasonable expectation of privacy regarding any 
communications or data transiting or stored on this information system. At 
any time, and for any lawful government purpose, the government may 
monitor, intercept, and search and seize any communication or data 
transiting or stored on this information system. 


Any communications or data transiting or stored on this information system 
may be disclosed or used for any lawful government purpose. 

Nothing herein consents to the search or seizure of a privately-owned 
information system or other privately owned communications devices, or 
the contents thereof that is in the system user’s home. 


click button: "I AGREE"] 


(2) Retain the pre-logon warning message on the screen until the user 
acknowledges the usage conditions and takes explicit actions to log 
on to or further access the information system (e.g., clicks the “I 
AGREE” button). 


HRC-6097 


c. Application owners of systems accessible by the general public that require access via logon 
interfaces must [L,M,H]: 


(1) Display to users a system use information banner before granting 
further access, see banner example in 12 FAH-10 H-112.7-1b(1); 


(2) Display to users references, if any, to monitoring, recording, or 
auditing consistent with privacy accommodations for such systems 
that generally prohibit those activities; and 


(3) Include in the notice given to public users, a description of authorized 
uses of the system. 


12 FAH-10 H-112.7-2 System Use Notification - User 
Responsibilities 

(CT:DS-002; 09-19-2014) 

Before logging on, the user must acknowledge reading the pre-logon 


warning message and agree to the conditions stated by pressing "I AGREE" 
[L,M,H]. 


12 FAH-10 H-112.8 Information Systems Use 


12 FAH-10 H-112.8-1 Information Systems Use - 

Management Responsibilities 

(CT:DS-002; 09-19-2014) 

a. Domestically, MED must approve all information systems used to process or store medically privileged 
information (Medical-SBU) protected under the Privacy Act of 1974, 5 U.S.C. 552a, MED must 
directly supervise and control these information systems [L,M,H]. 

b. Abroad, the regional Medical Officer or Foreign Service health practitioner, in coordination with the 
(SSO, must ensure that all information systems used to process and store medically privileged 
information (Medical-SBU) protected under the Privacy Act of 1974, 5 U.S.C. 552a, can only be 


accessed by individuals authorized by the regional medical officer or Foreign Service health 
practitioner in concurrence with the ISSO [L,M,H]. 


c. U.S. citizen direct-hire medica! supervisors [L,M,H]: 


(1) Must direct subordinates to process medical information only on SBU 
medical information systems authorized for such processing; 


(2) May direct subordinates not to process especially sensitive medical 
information on SBU medical information systems. System 
administrators and ISSOs have access to users’ libraries/files in the 
course of their duties; and 
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(3) At Critical Technical or HUMINT Threat Posts, must approve in writing 
and provide direct supervision of Locally Employed Staff (LE Staff) 
that require after-hours information systems account access. 


d. U.S. citizen direct-hire supervisors [L,M,H]: 


(1) May direct subordinates not to process especially sensitive 
information on SBU information systems. System administrators and 
ISSOs have access to users’ libraries/files in the course of their 
duties; 


(2) Must direct subordinates not to process SBU information on 
Department systems dedicated for non-sensitive processing (e.g., 
DINs); and 


(3) At Critical Technical or HUMINT Threat Posts, must approve in writing 
and provide direct supervision of LE Staff that require after-hours 
information systems account access. 

e. Supervisors, in coordination with their ISSO, must inform their employees that they must use the 
most stringent access controls (e.g., use file access controls, use encryption, etc.) when processing 
information concerning an individual considered to be compromising, adverse, embarrassing, or 
derogatory. Access to such information should be limited to those with a need to know 
requirement. Users must be advised to store such information on the information systems for the 

“minimum amount of time necessary [L,M,H]. 


12 FAH-10 H-112.8-2 Information Systems Use - System 
Administrator Responsibilities 


(CT:DS-002; 09-19-2014) 
The system administrator must [L,M,H]: 


(1) At Critical Technical or HUMINT Threat Posts, disable LE Staff 
information systems account access outside of normal post business 
hours. Only grant after-hours account access after receiving written 
approval from a cleared U. S. citizen supervisor; and maintain 
records of all after-hours approvals for a minimum of six months 
after after-hours access is no longer required. The records may need 
to be retained longer to meet regulatory (e.g., NARA) requirements 
and Department information retention requirements. After-hours 
access must be under the direct supervision of a cleared U.S. citizen 
supervisor; 


(2) Ensure that users process medical information only on SBU medical 
information systems authorized for such processing; 


(3) Ensure that all SBU information systems (e.g., OpenNet) are used 
only for processing SBU and non-sensitive unclassified 
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(4) 


information. The processing of classified and SBU/NOFORN 
information.is prohibited; and 


Ensure that all non-sensitive unclassified information systems (e.g., 
DINs) are used only for processing non-sensitive unclassified 
information. The processing of classified, SBU and SBU/NOFORN 
information is prohibited. 


12 FAH-10 H-112.8-3 Information Systems Use - ISSO 
Responsibilities 

(CT:DS-002; 09-19-2014) 

The ISSO must [L,M,H]:° 


(1) 


(2) 


3) 


4) 


5) 


6) 


7) 


Abroad, in coordination with the regional Medical Officer or Foreign 
Service health practitioner, ensure that all information systems used 
to process and store medically privileged information (Medica!-SBU) 
protected under the Privacy Act of 1974, can only be accessed by 
individuals authorized, in writing, by the regional Medical Officer or 
Foreign Service health practitioner; 


Ensure that users process medical information only on SBU medical 
information systems authorized for such processing; 


Ensure that all SBU information systems (e.g., OpenNet) are used 
only for processing SBU and non-sensitive unclassified 
information. Processing classified and SBU/NOFORN information is 
prohibited; 


Ensure that all non-sensitive unclassified information systems (e.g., 
DINs) are used only for processing non-sensitive unclassified 
information. Processing classified, SBU, and SBU/NOFORN 
information is prohibited; 


Instruct all information systems users that, when logged on, 
workstations are never to be left unattended by the user. All activity 
occurring when the workstation is logged-on is the responsibility of 
the user; 


At Critical Technical or HUMINT Threat Posts, review records of all LE 
Staff after-hours approvals; 


In coordination with the user’s supervisor, inform employees that 
they must use the most stringent access controls (e.g., use file 
access controls, use encryption, etc.) when processing information 
concerning an individual considered to be compromising, adverse, 
embarrassing, or derogatory. Access to such information should be 
limited to those with a need to know requirement. Users must be 
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advised to store such information on the information systems for the 
minimum amount of time necessary. 


12 FAH-10 H-112.8-4 Information Systems Use - User 
Responsibilities 

(CT:DS-002; 09-19-2014) 

Users must [L,M,H]: 


(1) Be aware that they have no reasonable expectation of privacy on 
Department information systems; 


(2) Only process SBU and non-sensitive unclassified information on 
Department SBU information systems (e.g., OpenNet). Processing 
classified and SBU/NOFORN information is prohibited; 


(3) Only process non-sensitive unclassified information on non-sensitive 
unclassified information systems (e.g., DINs). Processing classified, 
SBU, and SBU/NOFORN information is prohibited; 


(4) Use the most stringent access controls (e.g., use file access controls, 
use encryption, etc.) when processing information concerning an 
- individual considered to be compromising, adverse, embarrassing, or 
derogatory. Access to such information should be limited to those 
with a need to know requirement. Users must store such information 
on the information systems for the minimum amount of time 
necessary; 


(5) Never leave their workstations unattended when logged on. All 
activity occurring when the workstation is logged-on is the 
responsibility of the user; 


(6) Logoff of the workstations at the end of their work day; 


(7) Use discretion when processing especially sensitive information on 
unclassified information systems. Users should bear in mind that 
system administrators and ISSOs have access to users’ libraries/files 
in the course of their duties; 


(8) Process medical information only on SBU medical information 
systems authorized for such processing; and 


(9) For LE Staff at Critical Technical or HUMINT Threat Posts, receive 
prior written approval from a cleared U.S. citizen supervisor for after- 
hours information systems access. 
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12 FAH-10 H-112.9 Monitoring System User 
Activity ; 


12 FAH-10 H-112.9-1 Monitoring System User Activity - 
Management Responsibilities 


(CT:DS-002; 09-19-2014) 


DS/SI/CS, in coordination with IRM/IA, may review e-mail exiting the 
Department to detect and prevent the unauthorized transmission of data 
[L,M,H]. 


12 FAH-10 H-112.9-2 Monitoring System User Activity - 
ISSO Responsibilities 


(CT:DS-002; 09-19-2014) 


The ISSO conducts monthly reviews of randomly selected user accounts to 
ensure that users are [L,M,H]: 


(1) Adequately protecting sensitive information; 

(2) Not processing classified or SBU/NOFORN information; 

(3) Not installing or using unauthorized software; and 

(4) Not installing, connecting or using unauthorized hardware. 


12 FAH-10 H-112.10 Concurrent Session Control - 
Management Responsibilities (AC-10) 
(CT:DS-002; 09-19-2014) 


a. The IT CCB must ensure that approved operating systems have the capability to limit the number of 
concurrent sessions for the same user account [L,M,H]. 


b. DS/SI/CS must ensure that DS Security Configuration Standards configure the information systems to 
limit the number of concurrent sessions for the same user account to a maximum of one {L,M,H]. 


12 FAH-10 H-112.11 Session Lock (AC-11) 


12 FAH-10 H-112.11-1 Session Lock - Management 
’ Responsibilities 

(CT:DS-002; 09-19-2014) 

a. The IT CCB must ensure that approved operating systems have the capability to [L,M,H]: 
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(1) Automatically activate a password-protected screen saver on a 
logged-on workstation; and 


(2) Allow users to lock the workstation manually. 


b. DS/SI/CS must ensure that DS Security Configuration Standards configure the information systems to 
[L,M,H): 


(1) Automatically activate a password-protected screen saver on a 
logged-on workstation after fifteen minutes of inactivity; 

(2) Retain the session lock until the user logs back in; and 

(3) Allow users to lock the workstation manually. 


12 FAH-10 H-112.11-2 Session Lock - User 
Responsibilities 
(CT:DS-002; 09-19-2014) 
Users must [L,M,H]: 
(1) Initiate session lock by activating the password-protected screen 
saver, before leaving their workstation (e.g., press CNTRL +ALT 
+DEL keys then select “Lock this Computer”; or press Windows Flag 


key +L); (see 12 FAH-10 H-112.22-3 for thin client locking 
procedures) and 


(2) Not substitute a session lock for logging out of the information 
systems. Users must log out of the information systems at the end 
of each work day. 


12 FAH-10 H-112.12 Session Termination - 
Management Responsibilities (AC-12) 
(CT:DS-002; 09-19-2014) 


a. The IT CCB must ensure that approved operating systems have the capability to terminate user- 
initiated logical sessions after a Department approved time period [M,H]. 


b. DS/SI/CS must ensure that DS Security Configuration Standards configure the information systems to 
terminate a logical user session after a Department approved time period [M,H]. 


HRC-6103 


12 FAH-10 H-112.13 Permitted Actions Without 
Identification and Authentication - Management 
Responsibilities (AC-14) 

(CT:DS-002; 09-19-2014) 

DS/SI/CS must ensure that DS Security Configuration Standards configure 


the information systems to require identification and authentication before 
granting access to the information systems [L,M,H]. 


12 FAH-10 H-112.14 Installation of Non- 
Department-Owned Information Systems within 
Department Facilities (AC-20) 

(CT:DS-002; 09-19-2014) 


a. For the purpose of this section, “dedicated office space" means that the non-Department entity is 
responsible for controlling access to their leased space and does not share it with a Department 
office, and there is no Department information systems equipment in the space except as may have 
been approved in writing by DS/SI/CS and IRM/IA [L,M,H]. 

b. For the purpose of this section, “installation” refers to the non-Department information systems 


remaining in a Department facility for an approved amount of time, at a minimum overnight 
[L,M,H]. 


12 FAH-10 H-112.14-1 Installation of Non-Department- 
Owned Information Systems within Department Facilities - 
Management Responsibilities 


(CT:DS-002; 09-19-2014) 


a. Abroad, the RSO must approve the installation of non-Department owned information systems for: 
visitor presentations; on-site support of mission operations; and contractor 
maintenance. Installation must be in accordance with requirements specified in 12 FAH-6 H-542.5- 
A, paragraphs (a), (e), and (f}, respectively, of the Overseas Security Policy Board (OSPB) Unclassified 
Automated Information Systems Standard and 12 FAH-10 H-150, Wireless Access [L,M,H]. 


b. Domestically and abroad, non-Department entities (e.g., credit unions, tenant agencies) housed in 
Department facilities may install and/or use non-Department owned information systems in 
dedicated office space. The entity must comply with 12 FAH-10 H-150, Wireless Access, and any 
applicable guidance promulgated by Countermeasures Program Division (DS/ST/CMP) (L,M,H]. 
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12 FAH-10 H-112.14-2 Installation of Non-Department- 
Owned Information Systems within Department Facilities - 
System Administrator Responsibilities 

(CT;DS-002; 09-19-2014) 

The system administrator must ensure that non-Department owned 
information systems are not installed in a Department facility without written 
approval from DS/SI/CS and IRM/IA, except if the non-Department entity 


has approved dedicated office space (e.g., credit union, tenant agency) 
[L.M,H]. 


12 FAH-10 H-112.14-3 Installation of Non-Department- 
Owned Information Systems within Department Facilities - 
ISSO Responsibilities 

(CT:DS-002; 09-19-2014) 

The ISSO must ensure that non-Department owned information systems are 
not installed in a Department facility without written approval from DS/SI/CS 


and IRM/IA, except if the non-Department entity has approved dedicated 
office space (e.g., credit union, tenant agency) [L,M,H]. 


12 FAH-10 H-112.14-4 Installation of Non-Department- 
Owned Information Systems within Department Facilities - 
User Responsibilities 


(CT:DS-002; 09-19-2014) 


Users must not install non-Department owned information systems in a 
Department facility (e.g., do not leave a personally-owned laptop in a 
Department facility overnight) without written approval from DS/SI/CS and 
IRM/IA [L,M,H]. 


HRC-6105 


12 FAH-10 H-112.15 Department Stand-Alone 
Desktop Information Systems connected to Non- 
Department Systems (AC-20) 


12 FAH-10 H-112.15-1 Department Stand-Alone 

Desktop Information Systems connected to Non- 
Department Systems - System Administrator 
Responsibilities 

(CT:DS-002; 09-19-2014) 

The system administrator must ensure that Department stand-alone 
desktops authorized to connect to non-Department systems (e.g., Internet) 
are never simultaneously attached to a Department information system 
except through the use of a Department approved remote access program 


(e.g., Global OpenNet (GO)). Such desktops must be reimaged prior to any 
subsequent direct connectivity to a Department information system [L,M,H]. 


12 FAH-10 H-112.15-2 Department Stand-Alone Desktop 
Information Systems connected to Non-Department 
Systems - ISSO Responsibilities 


(CT:DS-002; 09-19-2014) 


The ISSO must ensure that Department stand-alone desktops authorized to 
connect to non-Department systems (e.g., Internet) are néver 
simultaneously attached to a Department information system except through 
the use of a Department approved remote access program (e.g., GO). Such 
desktops must be reimaged prior to any subsequent direct connectivity to a 
Department information system [L,M,H]. 


12 FAH-10 H-112.15-3 Department Stand-Alone Desktop 
Information Systems connected to Non-Department 
Systems — User Responsibilities 


(CT:DS-002; 09-19-2014) 


Users must ensure that Department stand-alone desktops authorized to 
connect to non-Department systems (e.g., Internet) are never 
simultaneously attached to a Department information system except through 
the use of a Department approved remote access program (e.g., GO). Such 
desktops must be reimaged by the system administrator prior to any 
subsequent direct connectivity to a Department information system [L,M,H]. 
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12 FAH-10 H-112.16 Department Information 
Systems Installed in Official Residences (AC-20) 


12 FAH-10 H-112.16-1 Department Information Systems 
Installed in Official Residences - Management 
Responsibilities 

(CT:DS-002; 09-19-2014) 


a. DS/SI/CS and IRM/IA must approve the installation of Department-owned information systems in 
official residences. Requesting posts and bureaus must demonstrate a compelling operational 
requirement for the connection [L,M,H]. 


b. Abroad, requests must be submitted via the DS/SI/CS and IRM/IA Web Portal. 


c. Domestically, the Bureau Executive Director must send all connectivity requests via official memo to 
DS/SI/CS and IRM/IA [L,M,H]. 


12 FAH-10 H-112.16-2 Department Information Systems 
Installed in Official Residences - System Administrator 
Responsibilities 

(CT:DS-002; 09-19-2014) 


The system administrator must ensure that Department-owned information 
systems are not installed in official residences without DS/SI/CS and IRM/IA 
written approval [L,M,H]. 


12 FAH-10 H-112.16-3 Department Information Systems 
Installed in Official Residences - ISSO Responsibilities 


(CT:DS-002; 09-19-2014) 


The ISSO must ensure that Department-owned information systems are not 
installed in official residences without DS/SI/CS and IRM/IA written approval 
(L,M,H]. 


12 FAH-10 H-112.17 Information Systems 
Interconnections/Extensions (AC-20) 
(CT:DS-002; 09-19-2014) 

See 12 FAH-10 H-312.2. 
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12 FAH-10 H-112.18 Unclassified Stand-Alone 
Facsimile (Fax) Equipment 


12 FAH-10 H-112.18-1 Unclassified Stand-Alone Facsimile 
(Fax) Equipment - Management Responsibilities 
(CT:DS-002; 09-19-2014) 


a. In accordance with 12 FAM 553, the RSO/post security officer (PSO) or principal unit security officer 
{PUSO)/bureau security officer (BSO) must report the transmission of classified material over 
unclassified fax equipment as a security incident [L,M,H]. 


b. The general services officer (GSO) must securely procure fax equipment for use in the controlled 
access area (CAA}, from U.S. vendors located in the United States. DS/CMP/TSC and 
IRM/OPS/ITI/LWS/FTP approval is required prior to procurement [L,M,H]. 


¢. For fax machines located inside a CAA the IMO, in coordination with the ISSO, must ensure the 
separation requirements addressed in 12 FAH-6, OSPB Security Standards and Policy Handbook, are 
met [L,M,H]. 


d. Abroad, the RSO/PSO or PUSO must ensure that, at a minimum, Secret-cleared U.S. citizen personnel 
install and repair fax equipment within the CAA [L,M,H]. 


12 FAH-10 H-112.18-2 Unclassified Stand-Alone Facsimile 
(Fax) Equipment - System Administrator Responsibilities 
(CT:DS-002; 09-19-2014) 

a. The system administrator must {L,M,H): 


(1) Report the transmission of classified material over unclassified fax 
equipment to the ISSO, RSO/PSO or PUSO/BSO; and 


(2) Refer to 12 FAH-10 H-262.5 “Media Sanitization” for requirements on 
disposal of non-volatile media. 


b. Abroad inside the CAA, the cleared U.S. citizen system administrator must locate stand-alone fax 
equipment in dedicated unclassified space (DUS) and it must be isolated in accordance with 
Telephone Security Group (TSG) standards (e.g., fiber and/or private branch exchange 
(PBX)/computerized telephone system (CTS) isolation in accordance with Post threat level 
requirements) [L,M,H]. 


12 FAH-10 H-112.18-3 Unclassified Stand-Alone Facsimile 
(Fax) Equipment - ISSO Responsibilities 


(CT:DS-002; 09-19-2014) 
The ISSO must [L,M,H]: 


(1) Assist the RSO/PSO or PUSO/BSO with suspected security incident 
investigations; 
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(2) Ensure all unclassified fax equipment is clearly labeled, “UP TO 
UNCLASSIFIED INFORMATION MAY BE PROCESSED ON THIS 
SYSTEM”; 


(3) In accordance with 12 FAM 553, report the transmission of classified 
material over unclassified fax equipment as a security incident; 


(4) For fax equipment located inside a CAA, in coordination with the IMO, 
ensure the separation requirements addressed in 12 FAH-6, Overseas 
Security Policy Board (OSPB) Security Standards and Policy 
Handbook, are met; and 


(5) Abroad, ensure that, at a minimum, Secret-cleared U.S. citizen 
personnel install and repair fax equipment within the CAA. 


12 FAH-10 H-112.18-4 Unclassified Stand-Alone Facsimile 
(Fax) Equipment -. User Responsibilities 

(CT:DS-002; 09-19-2014) 

Users must [L,M,H]: 


(1) Ensure that no classified information is processed on unclassified fax 
equipment; 


(2) Be aware that fax equipment uses unsecure commercial telephone 
lines to process and transmit unclassified data and these lines are 
vulnerable to covert monitoring; 


(3) Refer to 12 FAM 540 for requirements on sending SBU faxes; and 


(4) Immediately notify domestically, DS/CIRT, and abroad, the ISSO or 
RSO if they discover or suspect unauthorized disclosure of 
information or unauthorized transmission of data. Report 
unauthorized fax use to the ISSO, RSO/PSO or PUSO/BSO. 


12 FAH-10 H-112.19 Facsimile (Fax) 


Gateways/Servers 


12 FAH-10 H-112.19-1 Facsimile (Fax) Gateways/Servers 
- Management Responsibilities 


(CT:DS-002; 09-19-2014) 
Bureaus/Posts [L,M,H]: 


a. Must only use IT CCB or local CCB approved fax gateway/server equipment; and 


b. That require data networked fax services (Transmission Control Protocol (TCP}/internet Protocol (IP)) 


must submit an official memo/cable request to DS/SI/CS and IRM/IA for approval. 
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12 FAH-10 H-112.19-2 Facsimile (Fax) Gateways/Servers 
- System Administrator Responsibilities 

(CT:DS-002; 09-19-2014) 

The system administrator must [L,M,H]: 


a. Ensure fax gateways and/or fax servers configurations only allow outbound faxes and disable all 
inbound fax services; 


b. Configure fax gateways/servers to: . 
(1) Prohibit remote management, maintenance or configuration; 


(2) Prohibit transmission control protocol/Internet protocol (TCP/IP) 
services; 


(3) Prohibit inbound faxes; 


(4) Prohibit the use of multi-network connectivity (i.e., the fax gateway 
and/or fax server must only connect to a single local area network 
(LAN); and 


(5) Set the auto answer feature to off. 
c. Ensure that fax gateways/servers only use dial-up connections; 
d. Configure analog phone lines and/or computerized telephone system (CTS) so that: 


(1) All fax gateway/server extension lines only transit through the 
Department's CTS; 


(2) All fax gateway/server extension lines are outgoing trunks only on 
separate outgoing trunk groups. The outgoing trunk must not have 
any voice extensions; and 


(3) Incoming calls are prohibited. 


e. Ensure that fax gateway/server equipment used within the CAA is TSG-approved or connects to a TSG- 
approved disconnect device; 


f, Ensure that fax gateways and fax servers also meet existing telephone security, TEMPEST and 
information systems security standards; and 


g. Refer to 12 FAH-10 H-262.5 “Media Sanitization” for requirements on disposal of non-volatile media. 


12 FAH-10 H-112.19-3 Facsimile (Fax) Gateways/Servers 
- User Responsibilities 


(CT:DS-002; 09-19-2014) 
Users [L,M,H]: 


(1) Must ensure that no classified information is processed on fax 
gateway/server equipment; 
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(2) Must be aware that fax gateway/server equipment use unsecure 
commercial telephone lines to process and transmit data and these 
lines are vulnerable to covert monitoring; 


(3) Discovering or suspecting unauthorized disclosure of information, 
unauthorized transmission of data, or unauthorized fax use must 
immediately report such incidents to the ISSO, RSO/PSO or 
PUSO/BSO; and 


(4) Must refer to 12 FAM 540 for requirements on sending SBU faxes. 


12 FAH-10 H-112.20 Information Sharing - 
Management Responsibilities (AC-21) 
(CT:DS-002; 09-19-2014) 

Information systems owners must [M,H]: 


(1) Facilitate sharing of restricted information (e.g., privileged medical 
information, contract sensitive information, proprietary information) 
by enabling authorized users to determine whether access 
authorizations assigned to the sharing partner (e.g., individual, 
group, office) match the access restrictions on the information; and 


(2) Employ automated mechanisms or manual processes to assist users 
in making information sharing/collaboration decisions. 


12 FAH-10 H-112.21 Publicly Accessible Content - 
(AC-22) 


12 FAH-10 H-112.21-1 Publicly Accessible Content - 
Management Responsibilities 


(CT:DS-002; 09-19-2014) 
Bureaus/Posts must [L,M,H]: 


(1) Designate individuals authorized to post information onto a publicly 
accessible Department information system; 


(2) Train authorized individuals to ensure that publicly accessible 
information does not contain Department sensitive information; 


(3) Review proposed content of information prior to posting onto the 
publicly accessible Department information systems to ensure that 
Department sensitive information is not included; 
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(4) Review the content on the publicly accessible information systems for 
Department sensitive information at least monthly and remove, if 
discovered; and 


(5) See 5 FAM 790, Using Social Media, for more information. 


12 FAH-10 H-112.21-2 Publicly Accessible Content - User 
Responsibilities 

(CT:DS-002; 09-19-2014) 

Users must [L,M,H]: 


(1) Not post Department sensitive information onto a Department 
information system that is publicly accessible; 


(2) Be trained to ensure that publicly accessible information does not 
contain Department sensitive information; and 


(3) See 5 FAM 790, Using Social Media, for more information. 
12 FAH-10 H-112.22 Thin Clients 


12 FAH-10 H-112.22-1 Thin Clients - Management 
Responsibilities 
(CT:DS-002; 09-19-2014) 


a. The IT CCB must approve all thin-clients for use on Department SBU and non-sensitive unclassified 
information systems [L,M,H]. 


a 
b. Special Security Operations Division (DS/IS/SSO) approves the use of thin clients in sensitive 
compartmented information facilities (SCIFs} [L,M,H]. 


12 FAH-10 H-112.22-2 Thin Clients - System 
Administrator Responsibilities 


(CT:DS-002; 09-19-2014) 
The system administrator must ensure that thin clients [L,M,H]: 


(1) Used on Department SBU and non-sensitive unclassified information 
systems are Department-owned and IT CCB approved; 


(2) Are configured in accordance with the Global Information Technology 
Modernization (GITM) Post Thin Client Admin Guide located on the 
GITM Web Site; and 


(3) Abroad, disposal complies with 12 FAH-6 H-542.5-10, Unclassified 
Automated Information Systems (UAIS). 
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12 FAH-10 H-112.22-3 Thin Clients — User Responsibilities 
(CT:DS-002; 09-19-2014) 
Users must [L,M,H]: 


(1) Log off the thin client at close of business (COB) each day. Users 
must use the “Logoff Terminal Server” icon on the desktop screen to 
logoff the workstation; 


(2) Lock their thin clients when they are away from the workstation. 


(3) Use the “LOCK WORKSTATION” icon on the desktop screen to lock 
the workstation; and 


(4) Not use CTRL+ALT+DEL; because of the thin client’s configuration, 
users may need to power off and restart to log on. 


12 FAH-10 H-112.23 Unclassified Video 
Teleconferencing (UVTC) 


12 FAH-10 H-112.23-1 UVTC - Management 
Responsibilities 

(CT:DS-002;. 09-19-2014) 

a. The Office Director, domestically, and the RSO and IMO, abroad, must ensure [L,M,H]: 


(1) Registration of the UVTC ,if it is to be connected to the unclassified 
enterprise network (e.g., OpenNet); 


(2) Notification of the Video Program Office (IRM/OPS/ITI/SI/DTS) before 
connecting any equipment to the unclassified enterprise network 
(e.g., OpenNet); and 


(3) Abroad, inside the CAA, written approval by post’s counterintelligence 
working group (CIWG) and the Countermeasures Program Division 
(DS/ST/CMP). 


b. The IT CCB must approve all UVTC hardware and software [L,M,H]. 


c. The Special Security Operations Division {(DS/IS/SSO} must approve use of a UVTC within Sensitive 
Compartmented Information Facilities (SCIFs) [L,M,H]. 


12 FAH-10 H-112.23-2 UVTC - System Administrator 
Responsibilities 

(CT:DS-002; 09-19-2014) 

The system administrator must ensure [L,M,H]: 
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(1) Use of only Department-owned and IT CCB-approved UVTC hardware 
and software (contact the Video Program Office before ordering 
equipment for the unclassified enterprise network (e.g., OpenNet)); 


(2) Configuration of UVTC equipment is in accordance with the 
Department's Video Teleconference Security Configuration Standard, 
e.g., all auto answering and far end remote control features are 
disabled; 


(3) For the unclassified enterprise network (e.g., OpenNet), UVTC 
equipment licensing and accessibility for management is done by the 
Video Program Office; 


(4) For unclassified non-enterprise networks, UVTC equipment licensing 
and accessibility for management is done by the system owner; 


(5) Up-to-date maintenance contracts for all unclassified UVTC 
equipment to ensure that end points on the network have the proper 
firmware and configuration; and 


(6) The Special Security Operations Division (DS/IS/SSO) has approved 
the use of the UVTC prior to use within Sensitive Compartmented 
Information Facilities (SCIFs). 


12 FAH-10 H-112.23-3 UVTC - ISSO Responsibilities 
(CT:DS-002; 09-19-2014) 


The ISSO must ensure UVIC operators receive a copy of the UVTC 
Cybersecurity Awareness briefing, which advises the potential risks of using 
UVTC. See the Cybersecurity Awareness Web site for the latest briefing 
[L,M,H]. 


12 FAH-10 H-112.23-4 UVTC - User Responsibilities 
(CT:DS-002; 09-19-2014) 
When using the UVTC equipment, the user must [L,M,H]: 


(1) Face the UVIC camera away from any classified information, any 
unrelated SBU information and PII, and any areas outside the UVTC 
space; 


(2) When required, use only IT CCB approved noise-cancelling headsets; 
(3) Never leave active UVTC sessions unattended; 
(4) Log off when the UVTC session is completed; 


(5) Turn off the UVTC equipment (e.g., camera and microphones) and 
cover the camera lens when not in use; and 
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(6) Abroad, inside the CAA, the RSO or PSO and ISSO must ensure UVTC 
equipment is installed in accordance with 12 FAH-6 H-542.5-5. 
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From: Feltman, Jeffrey D 


Sent: Saturday, December 04, 2010 10:14 PM 

To: Sanderson, Janet A; Schlicher, Ronald 1; Cretz, Gene A: b6 
Lkatmbach, Heather £; Polaschik, Joan bic 

Subject: Fw: T/C w Musa Kusa 


FYI. I had told $ that, if it's bad, she might want to offer to bring Gene back. I'll ask her on Monday, or before if she calls, 
what happened. 
Jeffrey Feltman 


----- Original Message ----- 

From: H <HDR22@clintonemail.com> 

To: Burns, William J; Feltman, Jeffrey D; Kennedy, Patrick F 
Ce: Sullivan, Jacob J 

Sent: Sat Dec 04 13:53:21 2010 

Subject: T/C w Musa Kusa 


You will read in the memcon that Musa Kusa asked me that Bill come to Tripoli to discuss the US-Libya relationship and 


that Pat come to discuss embassy issues. | also, as per Jeff's suggestion, said | was asking Amb Cretz to come back to DC 
for consultations. Let's discuss how we follow up Monday. 
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CYBER-1A27 DIE 


From: WASHINGTON FIELD 
WE-CI13 
b6 
b7C 
Approved By: assaT sid 


pare tes ae 


Case ID | (U) RESTRICTED - Access Denied ia 


bTE 
Synopsis: i To document a damaged compact disk (CD) located 
in YBER-1A27. 


bIE 


Details: 


(U/ APOE} For reference, Special Agents ey) | ee 


CJ have been gathering and copying materials from the captioned 
case located in the Washington Field Office (WFO) CI-13 Workbox in 
response to a Freedom of Information Act (FOIA) tasking from 
Information Management Division (IMD; formerly known as Records 
Management Division). 


(U//FOUS+ On or about February 6, 2019, sal —=wd opened ee 


CYBER-1A27, which contained a CD with a crack on it (a 7c 
damaged CD). sa[____]attemptea to copy the damaged CD at the WFO bIE 
Computer Analysis Response Team (CART) self-service area, but was not 
able to do so. saL__] spoke with FBI information technology 


SESRET//NoroRN 


HRC-13832 


BEGRET/ /NOFORN- 


Ticte: (u/mroves panased co ry 


Re: 02/12/2019 
specialists on the ground floor of WFO regarding the damaged CD, 


indicated it was unlikely the CD could be copied. 
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‘Speret/7NOFORN- 


who 


HRC-13833 


b3 
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essa Nengsy 


FD-1057 (Rev. 5-8-10) 


SEeRET//NOFOR- 
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Electronic Communication 


Title: (U//Pese+ Missing tem -L_——sd Date: 02/12/2019 = 


1A4 


From: WASHINGTON FIELD 
WE-CI13 


b6é 


Drafted By: 


Case ID lL —sd (U) RESTRICTED - Access Denied ee 


bIc 


Synopsis: (U//FO86}+ To document missing item b7E 
which is described as "Notes from Meeting" acquired by 


Reference: LC —sid serra 44 Pe. 
bIE 


Enclosure(s): Enclosed are the following items: 


1. (U/APe8O}) Email 
Details: 


(U/7FOUey For reference, Washington Field Office (WFO) CI-13 has been 
gathering and copying materials from captioned case in response to a 
Freedom of Information Act (FOIA) tasking from Information Management 
Division (IMD; formerly Records Management Division). 


(U/ AOUO} On or about February 4, 2019, Special Agents (SAs) CL] ee 
attempted to locate 1A4, pyc 
described as "Notes from Meeting” acquired by (see BIE 


referenced serial). The SAs looked through all case materials in the 


SEGRET//NOFORIt 


HRC- 13834 


‘SReRET/ /rorenn— 
Title: (U/AP@8O} Missing Item -[|———=«*tLAS 


ee Lo Jzsiz/20ns 


CI-13 file and workbox area, however, they were not able to locate 
this item. 


(U/ SFORSyY saL__] inquired with Supervisory Intelligence Analyst 


(SIA) | regarding the item, as_he was previously the IA 


regarding the item, who indicated he remembered handing 
over his notes to | ns | (see attached email). 


(U//FOUE} On February 6, 2019, saL____]contacted sal___| 


regarding the notes. SA explained he documented all relevant 
case materials before leaving the case and did not retain any notes or 
other case materials. 


(U//P@86+ As such, WFO CI-13 considers the item missing and will 
enclose this document into 1A4 as a placeholder until the missing item 
is located, 
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Subject: RE: MYE Serial #?? 
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De: ify On: 2 ak 
b6 
BIC 


From wey ra bie 


Sent: Tuesday, February 05, 2019 10:31 AM 


Classification: DESRET/ ANeFeRM- 


ified By: FS8 
I NSICG 
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De: tify On 


b6 
bIC 
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I : 
bICc 


b7E 
From: (Wwe) (FBI) tee 
Sent: Tuesday, February 05, 2019 9:54 AM 
Subject: RE: MYE Serial #?? --- SEGRET/NEFORNE 
Classification: DESRRT/ HeroRL 
ified By: W3 
Derived I NSICG 
D. #2 
b6 
b7C 


Fem Jor Me 


Sent: Tuesday, February 05, 2019 8:00 AM 
Te wn afd 
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Decl 
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